ET PHISHING Request for Possible Adobe Phishing Hosted on Github.io

alert tls $HOME_NET any -> $EXTERNAL_NET any (
    msg:"ET PHISHING Request for Possible Adobe Phishing Hosted on Github.io";
    flow:established,to_server;
    tls.sni;
    content:"adobe"; fast_pattern;
    content:".github.io"; endswith;
    content:!"adobe.github.io"; depth:15; endswith;
    content:!"adobe-fonts.github.io"; depth:21; endswith;
    content:!"adobe-type-tools.github.io"; depth:26; endswith;
    content:!"adobe-apiplatform.github.io"; depth:27;
    classtype:policy-violation;
    sid:2027249; rev:8;
    metadata:affected_product Web_Browsers, attack_target Client_Endpoint, created_at 2019_04_23, deployment Perimeter, confidence Medium, signature_severity Major, tag Phishing, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2022_03_24;
)