[Emerging-Sigs] Diet Scam Site

Darien Huss dhuss at emergingthreats.net
Thu Sep 18 17:30:51 EDT 2014


Thanks Adnan, unfortunately we'll need more information related to this
before we can post something that would blacklist this site/these IP ranges.

Regards,
Darien

On Thu, Sep 18, 2014 at 2:01 PM, joakimsen <joakimsen at gmail.com> wrote:

>  Why do you think the site is a scam? Does the site not ship the product
> when ordered? Does it steal credit cards, install malware, etc?
>
> On 9/18/2014 2:07 AM, Adnan bin Mohd Shukor wrote:
>
> These IP range has been used to host diet scam website eg:
> mydailywellbeing[.]net
>
>  alert tcp $HOME_NET any -> [
> 192.64.176.146/31,192.64.176.148/30,192.64.176.152/29,192.64.176.160/27,192.64.176.192/29]
> any (msg:"Diet Scam Site"; content:"GET"; http_method; sid:1000000; rev:1;)
>
>
> _______________________________________________
> Emerging-sigs mailing listEmerging-sigs at lists.emergingthreats.nethttps://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
>
> Support Emerging Threats! Subscribe to Emerging Threats Pro http://www.emergingthreats.net
>
>
>
> _______________________________________________
> Emerging-sigs mailing list
> Emerging-sigs at lists.emergingthreats.net
> https://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
>
> Support Emerging Threats! Subscribe to Emerging Threats Pro
> http://www.emergingthreats.net
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.emergingthreats.net/pipermail/emerging-sigs/attachments/20140918/4eae5735/attachment-0001.html>


More information about the Emerging-sigs mailing list