[Emerging-Sigs] Diet Scam Site

Adnan bin Mohd Shukor adnan.shukor at gmail.com
Thu Sep 18 22:06:19 EDT 2014


Some reference that can be used

https://www.bluecoat.com/security-blog/2013-04-04/spam-scam-or-malware
http://blog.cloudmark.com/2014/06/19/pinterest-hit-by-the-com-spammers-dr-oz-says-he-is-not-responsible/

Thanks




On 19 September 2014 05:30, Darien Huss <dhuss at emergingthreats.net> wrote:

> Thanks Adnan, unfortunately we'll need more information related to this
> before we can post something that would blacklist this site/these IP ranges.
>
> Regards,
> Darien
>
> On Thu, Sep 18, 2014 at 2:01 PM, joakimsen <joakimsen at gmail.com> wrote:
>
>>  Why do you think the site is a scam? Does the site not ship the product
>> when ordered? Does it steal credit cards, install malware, etc?
>>
>> On 9/18/2014 2:07 AM, Adnan bin Mohd Shukor wrote:
>>
>> These IP range has been used to host diet scam website eg:
>> mydailywellbeing[.]net
>>
>>  alert tcp $HOME_NET any -> [
>> 192.64.176.146/31,192.64.176.148/30,192.64.176.152/29,192.64.176.160/27,192.64.176.192/29]
>> any (msg:"Diet Scam Site"; content:"GET"; http_method; sid:1000000; rev:1;)
>>
>>
>> _______________________________________________
>> Emerging-sigs mailing listEmerging-sigs at lists.emergingthreats.nethttps://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
>>
>> Support Emerging Threats! Subscribe to Emerging Threats Pro http://www.emergingthreats.net
>>
>>
>>
>> _______________________________________________
>> Emerging-sigs mailing list
>> Emerging-sigs at lists.emergingthreats.net
>> https://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
>>
>> Support Emerging Threats! Subscribe to Emerging Threats Pro
>> http://www.emergingthreats.net
>>
>>
>>
>
> _______________________________________________
> Emerging-sigs mailing list
> Emerging-sigs at lists.emergingthreats.net
> https://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
>
> Support Emerging Threats! Subscribe to Emerging Threats Pro
> http://www.emergingthreats.net
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.emergingthreats.net/pipermail/emerging-sigs/attachments/20140919/764444bd/attachment.html>


More information about the Emerging-sigs mailing list