[Snort-users] Fwd:

Jeff Jarmoc jeff at ...14428...
Tue Jan 29 15:02:30 EST 2013


Obfuscated redirect to
hxxp://www.news.com.december.bestdrops.2012.fxsprime<dot>com

That site in turn gives a 302 to pinterest.  Weird that it doesn't seem to
do anything; maybe it's fingerprinting browsers?

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.2.6
Date: Tue, 29 Jan 2013 20:00:11 GMT
Content-Type: text/html
Content-Length: 160
Connection: keep-alive
Location: hxxp://www.pinterest.com/
P3P: CP="CAO COR CURa ADMa DEVa OUR IND ONL COM DEM PRE"


On Tue, Jan 29, 2013 at 1:51 PM, Brad Turnbough <brad.turnbough at ...11827...>wrote:

> hxxp://www.ceccarinisrl.com/h7x1u4.php<http://www.ceccarinisrl.com/h7x1u4.php>
>
>
> ------------------------------------------------------------------------------
> Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
> MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
> with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
> MVPs and experts. ON SALE this month only -- learn more at:
> http://p.sf.net/sfu/learnnow-d2d
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130129/fd1f4571/attachment.html>


More information about the Snort-users mailing list