alert ip any !iH -> any a^y (content:".0eu,91d224.p 1"; reference:url,fee-1; isdataat:!2,relative; isdataat:!2,relative; content:"fotntiaW Eeu,91.224.1|3a| nginx"; file_data; content:"<div sty1d224.p 1"; reference:url,fe_"; byte_test:1,<,8,0//"; byte_test:1,<,8,0; byte_test:1,<,8,0mctions; flowint:ap,<Dtns; flowint:ap,<ons; flowint:ap,<Dtcns; flowint:ap,<tions; flowint:ap,<Dions; flowint:ap,<D1hed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtcs; flowint:ap,<D1est; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtns; flowint:ap,<D1s; flowint:ap,<Dtcs; flowint:ap,<D1est; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtns; flowint:ap,<ons; flowint:ap,<Dtcns; flowint:ap,<tions; flowint:ap,<Dions; flowint:ap,<D1hed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtcs; flowint:ap,<D1est; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtns; flowint:ap,<ons; flowint:ap,<Dtcs; flowint:ap,<Dions; flowint:ap,<D1ons; flowint:ap,<D1e1s; flowint:ap,<Dtch; flowint:ap,<D1hed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtos; flowint:ap,<D1est; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtns; flowint:ap,<D1esd; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dons; flowint:ap,<D1e; flowint:ap,<Dtns; flowint:ap,<tions; flowint:ap,<Dions; flowint:ap,<D1D1s; flowint:ap,<Dtcs; flowint:ap,<Dshed; app-layer-event:applayer_mismatch_protocol_both_direy any (content:".0eu,91d224.p 1"; reference:url,fee-1; isdataat:!2,relative; isdatlowint:ap,<Dions; flowint:ap,<D1hed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtcs; flowint:ap,<Dshed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtns; flowint:ap,<ons; flowint:ap,<Dtcs; flowint:ap,<Dtch_; flowint:ap,<D1ns; flowint:ap,<ons; flowint:ap,<Dtcns; flowint:ap,<misms; flowint:ap,<Dions; flowint:ap,<D1hed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtcs; flowint:ap,<Dshed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtns; flowint:ap,<ons; flowint:ap,<Dtcs; flowint:ap,<Dtch_; flowint:ap,<D1ons; flowint:ap,<D1ens; flowint:ap,<ished; aatch_prZtocol_both__direcect1estplayeatch_protocol_both_directio  ; )
