Recent:
http://www[.]ygdholdings[.]com/bankline/message[.]php
On 08/11/14 15:19, Reindl Harald wrote:
Am 04.11.2014 um 11:30 schrieb Axb:
On 11/04/2014 02:31 AM, David Jones wrote:
Can someone post an example of this latest version to pastebin?
I filter for over 90,000 mailboxes and don't seem to be experiencing
this spam or either it's getting blocked by other means. No user
complaints.
just sighted:
http://structuresgroup[.]com/dropbox/document[.]php
structuresgroup.com listed on black.uribl.com
structuresgroup.com listed on uri.invaluement.com
http://www[.]sunderlandscouts[.]org[.]uk/dropbox/document[.]php
sunderlandscouts.org.uk listed on black.uribl.com
sunderlandscouts.org.uk listed on uri.invaluement.com
http://spschile[.]com/dropbox/document[.]php
spschile.com listed on black.uribl.com
spschile.com listed on uri.invaluement.com
recent:
http://www[.]saarthakyatra[.]com/2014%20DOC[.]OBO/newgdoc/index[.]php
uri RH_URI_MLW_ZEROHOUR
/\/(dropbox|googlebox|banking|newgdoc)\/(document|doc|invoice|index)\.php$/
--
Paul Stead
Systems Engineer
Zen Internet
