PaulDotCom mailing list archives
Re: (no subject)
From: Andrew Case <andrew () digitalforensicssolutions com>
Date: Mon, 25 Apr 2011 09:59:59 -0500
Looks legit to me: ubuntu:~/t35# grep prescription index.html <meta http-equiv="Refresh" content="0;http://rxprescription.ru/?camp=ggl"> document.location.href = "http://rxprescription.ru/?camp=ggl"; <h1><a href="http://rxprescription.ru/?camp=ggl">Click here to continue ...</a></h1> On Mon, Apr 25, 2011 at 9:24 AM, Mike Patterson <mike () snowcrash ca> wrote:
On 2011/04/25 9:25 AM, Jamie Starkel wrote:hxxp://luhucepu.t35.com/I hope it goes without saying that nobody should click on this link as it was originally presented. It looks suspicious as all hell. If somebody cares to check it out and post back saying y/N, cool, but work etc. _______________________________________________ Pauldotcom mailing list Pauldotcom () mail pauldotcom com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
-- Andrew Case Senior Security Analyst @ Digital Forensics Solutions http://www.digitalforensicssolutions.com _______________________________________________ Pauldotcom mailing list Pauldotcom () mail pauldotcom com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
Current thread:
- (no subject) Jamie Starkel (Apr 25)
- Re: (no subject) Mike Patterson (Apr 25)
- Re: (no subject) Andrew Case (Apr 25)
- Re: (no subject) Craig Freyman (Apr 25)
- Re: (no subject) Mike Patterson (Apr 25)
- Re: (no subject) Joel Esler (Apr 25)
- Re: (no subject) Jeremy Pommerening (Apr 25)
- Re: (no subject) Mike Patterson (Apr 25)
- Re: (no subject) Mike Patterson (Apr 25)