DNS/HTTP connection to malicious HTS infrastructure phf-ubp[.]com
Detects DNS queries for the domain 'phf-ubp.com', which is associated with fraudulent HTS infrastructure. This rule monitors network traffic for indicators of communication with known malicious infrastructure.
Suricata
