Survey Lure Page Used for Information Gathering

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•1

This rule detects HTTP responses that contain content indicative of a survey lure page used for information gathering. It specifically looks for the presence of keywords such as 'survey', 'name', 'email', and 'company' within the HTTP response body, suggesting an attempt to collect personal or organizational information.