[TheForge] Re: Jim: are these links safe to go to?

Mike Spencer mspencer at tallships.ca
Sun Jul 1 20:45:00 EDT 2012


> Jim: are these links safe to go to?  It looks a lot like a virus
> infection that a friend of mine had last month.

The cuisinartfoodprocessorblender.com domain is registered to Wee
Ching Tnah in Maylasia.  It's hosted by hostgator.com (USA) that has a
history of hosting spammy and crappy domains.

But the full URL given,

>  http://cuisinartfoodprocessorblender.com/kbvmma.html?cci=nhnwffn

is a page that forwards you to http://msbcn-story.com. msbcn-story.com
is a domain registered to Olga Golubeva in Russia. The actual server
appears to be in the Ukraine.  The page from the Ukraine wants to
sell you "HCG Ultra Drops to Help Your Weight Drop".

It's not certain that this came from James Davis' computer.  But given
recent spam to the list, some list member's computer is probably
compromised and using the resident address book for both To: and From:
in spam.  We've seen this same stuff from both Yahoo and Hotmail so
I'm guessing it's somebody's computer compromised, not their Yahoo or
Hotmail account. All kinda vague, though.

Everybody check your computer for malware and your outbound traffic
for excessive stuff being sent.

- Mike

-- 
Michael Spencer                  Nova Scotia, Canada       .~. 
                                                           /V\ 
mspencer at tallships.ca                                     /( )\
http://home.tallships.ca/mspencer/                        ^^-^^



More information about the TheForge mailing list