alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Classmates - DNS request for classmates.com"; dns.query; dotprefix; content:".classmates.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000000; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Classmates - Related URL (classmates.com)"; http.host; dotprefix; content:".classmates.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000001; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Classmates - Related TLS SNI (classmates.com)"; tls.sni; dotprefix; content:".classmates.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000002; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Facebook - DNS request for facebook.com"; dns.query; dotprefix; content:".facebook.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000003; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Facebook - Related URL (facebook.com)"; http.host; dotprefix; content:".facebook.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000004; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Facebook - Related TLS SNI (facebook.com)"; tls.sni; dotprefix; content:".facebook.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000005; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Facebook - DNS request for facebook.net"; dns.query; dotprefix; content:".facebook.net"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000006; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Facebook - Related URL (facebook.net)"; http.host; dotprefix; content:".facebook.net"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000007; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Facebook - Related TLS SNI (facebook.net)"; tls.sni; dotprefix; content:".facebook.net"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000008; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Facebook - DNS request for fbcdn.net"; dns.query; dotprefix; content:".fbcdn.net"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000009; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Facebook - Related URL (fbcdn.net)"; http.host; dotprefix; content:".fbcdn.net"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000010; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Facebook - Related TLS SNI (fbcdn.net)"; tls.sni; dotprefix; content:".fbcdn.net"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000011; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Foursquare - DNS request for foursquare.com"; dns.query; dotprefix; content:".foursquare.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000012; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Foursquare - Related URL (foursquare.com)"; http.host; dotprefix; content:".foursquare.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000013; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Foursquare - Related TLS SNI (foursquare.com)"; tls.sni; dotprefix; content:".foursquare.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000014; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Instagram - DNS request for instagram.com"; dns.query; dotprefix; content:".instagram.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000015; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Instagram - Related URL (instagram.com)"; http.host; dotprefix; content:".instagram.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000016; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Instagram - Related TLS SNI (instagram.com)"; tls.sni; dotprefix; content:".instagram.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000017; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - LinkedIn - DNS request for linkedin.com"; dns.query; dotprefix; content:".linkedin.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000018; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - LinkedIn - Related URL (linkedin.com)"; http.host; dotprefix; content:".linkedin.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000019; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - LinkedIn - Related TLS SNI (linkedin.com)"; tls.sni; dotprefix; content:".linkedin.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000020; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - match_com - DNS request for match.com"; dns.query; dotprefix; content:".match.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000021; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - match_com - Related URL (match.com)"; http.host; dotprefix; content:".match.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000022; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - match_com - Related TLS SNI (match.com)"; tls.sni; dotprefix; content:".match.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000023; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - MySpace - DNS request for myspace.com"; dns.query; dotprefix; content:".myspace.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000024; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - MySpace - Related URL (myspace.com)"; http.host; dotprefix; content:".myspace.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000025; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - MySpace - Related TLS SNI (myspace.com)"; tls.sni; dotprefix; content:".myspace.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000026; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - MySpace - DNS request for myspacecdn.com"; dns.query; dotprefix; content:".myspacecdn.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000027; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - MySpace - Related URL (myspacecdn.com)"; http.host; dotprefix; content:".myspacecdn.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000028; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - MySpace - Related TLS SNI (myspacecdn.com)"; tls.sni; dotprefix; content:".myspacecdn.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000029; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Pinterest - DNS request for pinterest.com"; dns.query; dotprefix; content:".pinterest.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000030; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Pinterest - Related URL (pinterest.com)"; http.host; dotprefix; content:".pinterest.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000031; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Pinterest - Related TLS SNI (pinterest.com)"; tls.sni; dotprefix; content:".pinterest.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000032; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Reddit - DNS request for reddit.com"; dns.query; dotprefix; content:".reddit.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000033; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Reddit - Related URL (reddit.com)"; http.host; dotprefix; content:".reddit.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000034; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Reddit - Related TLS SNI (reddit.com)"; tls.sni; dotprefix; content:".reddit.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000035; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Renren - DNS request for renren.com"; dns.query; dotprefix; content:".renren.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000036; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Renren - Related URL (renren.com)"; http.host; dotprefix; content:".renren.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000037; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Renren - Related TLS SNI (renren.com)"; tls.sni; dotprefix; content:".renren.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000038; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Twitter - DNS request for twitter.com"; dns.query; dotprefix; content:".twitter.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000039; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Twitter - Related URL (twitter.com)"; http.host; dotprefix; content:".twitter.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000040; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Twitter - Related TLS SNI (twitter.com)"; tls.sni; dotprefix; content:".twitter.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000041; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - VKontakte - DNS request for vkontakte.ru"; dns.query; dotprefix; content:".vkontakte.ru"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000042; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - VKontakte - Related URL (vkontakte.ru)"; http.host; dotprefix; content:".vkontakte.ru"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000043; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - VKontakte - Related TLS SNI (vkontakte.ru)"; tls.sni; dotprefix; content:".vkontakte.ru"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000044; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Xing - DNS request for xing.com"; dns.query; dotprefix; content:".xing.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000045; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Xing - Related URL (xing.com)"; http.host; dotprefix; content:".xing.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000046; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Xing - Related TLS SNI (xing.com)"; tls.sni; dotprefix; content:".xing.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000047; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - BeReal - DNS request for bereal.com"; dns.query; dotprefix; content:".bereal.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000048; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - BeReal - Related URL (bereal.com)"; http.host; dotprefix; content:".bereal.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000049; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - BeReal - Related TLS SNI (bereal.com)"; tls.sni; dotprefix; content:".bereal.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000050; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Bluesky - DNS request for bsky.app"; dns.query; dotprefix; content:".bsky.app"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000051; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Bluesky - Related URL (bsky.app)"; http.host; dotprefix; content:".bsky.app"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000052; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Bluesky - Related TLS SNI (bsky.app)"; tls.sni; dotprefix; content:".bsky.app"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000053; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - DeviantArt - DNS request for deviantart.com"; dns.query; dotprefix; content:".deviantart.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000054; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - DeviantArt - Related URL (deviantart.com)"; http.host; dotprefix; content:".deviantart.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000055; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - DeviantArt - Related TLS SNI (deviantart.com)"; tls.sni; dotprefix; content:".deviantart.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000056; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Flickr - DNS request for flickr.com"; dns.query; dotprefix; content:".flickr.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000057; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Flickr - Related URL (flickr.com)"; http.host; dotprefix; content:".flickr.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000058; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Flickr - Related TLS SNI (flickr.com)"; tls.sni; dotprefix; content:".flickr.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000059; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Goodreads - DNS request for goodreads.com"; dns.query; dotprefix; content:".goodreads.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000060; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Goodreads - Related URL (goodreads.com)"; http.host; dotprefix; content:".goodreads.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000061; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Goodreads - Related TLS SNI (goodreads.com)"; tls.sni; dotprefix; content:".goodreads.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000062; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Lemon8 - DNS request for lemon8-app.com"; dns.query; dotprefix; content:".lemon8-app.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000063; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Lemon8 - Related URL (lemon8-app.com)"; http.host; dotprefix; content:".lemon8-app.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000064; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Lemon8 - Related TLS SNI (lemon8-app.com)"; tls.sni; dotprefix; content:".lemon8-app.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000065; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Letterboxd - DNS request for letterboxd.com"; dns.query; dotprefix; content:".letterboxd.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000066; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Letterboxd - Related URL (letterboxd.com)"; http.host; dotprefix; content:".letterboxd.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000067; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Letterboxd - Related TLS SNI (letterboxd.com)"; tls.sni; dotprefix; content:".letterboxd.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000068; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Mastodon - DNS request for mastodon.social"; dns.query; dotprefix; content:".mastodon.social"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000069; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Mastodon - Related URL (mastodon.social)"; http.host; dotprefix; content:".mastodon.social"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000070; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Mastodon - Related TLS SNI (mastodon.social)"; tls.sni; dotprefix; content:".mastodon.social"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000071; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Nextdoor - DNS request for nextdoor.com"; dns.query; dotprefix; content:".nextdoor.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000072; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Nextdoor - Related URL (nextdoor.com)"; http.host; dotprefix; content:".nextdoor.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000073; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Nextdoor - Related TLS SNI (nextdoor.com)"; tls.sni; dotprefix; content:".nextdoor.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000074; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Patreon - DNS request for patreon.com"; dns.query; dotprefix; content:".patreon.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000075; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Patreon - Related URL (patreon.com)"; http.host; dotprefix; content:".patreon.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000076; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Patreon - Related TLS SNI (patreon.com)"; tls.sni; dotprefix; content:".patreon.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000077; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Snapchat - DNS request for snapchat.com"; dns.query; dotprefix; content:".snapchat.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000078; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Snapchat - Related URL (snapchat.com)"; http.host; dotprefix; content:".snapchat.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000079; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Snapchat - Related TLS SNI (snapchat.com)"; tls.sni; dotprefix; content:".snapchat.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000080; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Threads - DNS request for threads.net"; dns.query; dotprefix; content:".threads.net"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000081; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Threads - Related URL (threads.net)"; http.host; dotprefix; content:".threads.net"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000082; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Threads - Related TLS SNI (threads.net)"; tls.sni; dotprefix; content:".threads.net"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000083; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - TikTok - DNS request for tiktok.com"; dns.query; dotprefix; content:".tiktok.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000084; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - TikTok - Related URL (tiktok.com)"; http.host; dotprefix; content:".tiktok.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000085; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - TikTok - Related TLS SNI (tiktok.com)"; tls.sni; dotprefix; content:".tiktok.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000086; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - VKontakte - DNS request for vk.com"; dns.query; dotprefix; content:".vk.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000087; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - VKontakte - Related URL (vk.com)"; http.host; dotprefix; content:".vk.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000088; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - VKontakte - Related TLS SNI (vk.com)"; tls.sni; dotprefix; content:".vk.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000089; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - X - DNS request for x.com"; dns.query; dotprefix; content:".x.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000090; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - X - Related URL (x.com)"; http.host; dotprefix; content:".x.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000091; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - X - Related TLS SNI (x.com)"; tls.sni; dotprefix; content:".x.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000092; rev:2;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Tumblr - DNS request for tumblr.com"; dns.query; dotprefix; content:".tumblr.com"; endswith; nocase; reference:url,social-media; classtype:policy-violation; sid:51000093; rev:2;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Tumblr - Related URL (tumblr.com)"; http.host; dotprefix; content:".tumblr.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000094; rev:2;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Tumblr - Related TLS SNI (tumblr.com)"; tls.sni; dotprefix; content:".tumblr.com"; endswith; nocase; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000095; rev:2;)