[clamav-users] FP: ScamNailer.Phish.en_notification_AT_made-in-china.com

Reindl Harald h.reindl at thelounge.net
Thu Mar 23 14:08:21 UTC 2017



Am 23.03.2017 um 15:05 schrieb Reindl Harald:
> hopefully someone from "scamnailer" reads this - please remove that rule
> - these are 100% false positives - there are subdomains below and well
> if you have business customers you will end one of them linked in a
> mailsignature
>
> [ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(ad638b8abc0d0af59ded4aa2835061e3:293969)]

this is all the same thread and a part of it *outbound* answers

Fri Mar 17 13:52:36 2017 -> stream(127.0.0.1 at 30666): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(f986d6f2cf7953396c69b2e5802719ed:24675) 
FOUND
Fri Mar 17 14:05:54 2017 -> stream(127.0.0.1 at 30385): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(e7a7d70f5780e8efdef38a6ec592bb82:24712) 
FOUND
Fri Mar 17 14:06:36 2017 -> stream(127.0.0.1 at 30145): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(c4f8aa6194bc79543f172522cb6faec6:24712) 
FOUND
Fri Mar 17 14:11:42 2017 -> stream(127.0.0.1 at 30607): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(a4122549f7e52f19875e23532beb681e:24712) 
FOUND
Fri Mar 17 14:12:48 2017 -> stream(127.0.0.1 at 30395): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(a71d38fcbf1ba0fcf134bca0f019211b:24712) 
FOUND
Fri Mar 17 14:13:30 2017 -> stream(127.0.0.1 at 30797): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(3e16ec1d6039d271fbae0eb5b92345a4:24717) 
FOUND
Fri Mar 17 14:18:03 2017 -> stream(127.0.0.1 at 30726): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(2b5afa60dd1459429083b4d777fc07d1:24712) 
FOUND
Fri Mar 17 14:39:54 2017 -> stream(127.0.0.1 at 30161): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(0cdacb2b1e5f008794e97e8a56995209:24712) 
FOUND
Fri Mar 17 14:45:20 2017 -> stream(127.0.0.1 at 30491): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(29aeaad35dff8e08cce737eb24a57208:24712) 
FOUND
Fri Mar 17 14:53:17 2017 -> stream(127.0.0.1 at 30941): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(1308a24444a0c406b0a959402db87210:24637) 
FOUND
Fri Mar 17 14:54:20 2017 -> stream(127.0.0.1 at 30089): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(1308a24444a0c406b0a959402db87210:24637) 
FOUND
Fri Mar 17 15:03:50 2017 -> stream(127.0.0.1 at 30450): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(bbc36914b9dd7aa5d1418f17f495cf8c:25691) 
FOUND
Fri Mar 17 15:13:12 2017 -> stream(127.0.0.1 at 30360): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(247ec12887cf99a9664e2bc112b1be56:40782) 
FOUND
Fri Mar 17 15:13:54 2017 -> stream(127.0.0.1 at 30059): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(8ed992c0ef88d8f95183d77fd03a5e4d:39078) 
FOUND
Fri Mar 17 15:31:48 2017 -> stream(127.0.0.1 at 30886): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(945e3c364cec8ce756a95c055f47d97a:215428) 
FOUND
Sat Mar 18 06:20:09 2017 -> stream(127.0.0.1 at 30723): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(dae845d4ffe250f3dbb2a83ee366ff4c:54624) 
FOUND
Sat Mar 18 06:27:09 2017 -> stream(127.0.0.1 at 30169): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(eb5f298fd0c78f747d25185bd181de13:63484) 
FOUND
Mon Mar 20 13:08:47 2017 -> stream(127.0.0.1 at 30855): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(fa2a45aa75a070f2678b66fc7fa5a2fa:190423) 
FOUND
Mon Mar 20 13:54:25 2017 -> stream(127.0.0.1 at 30496): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(be4a884d76bc3398fb9d075679060b9f:202519) 
FOUND
Mon Mar 20 14:36:23 2017 -> stream(127.0.0.1 at 30235): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(de7c3c08bf7b0b7b2d90a90f47c1fc7e:210507) 
FOUND
Mon Mar 20 16:59:42 2017 -> stream(127.0.0.1 at 30856): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(1e7b95064c8efdda6135b47866d00ec2:213148) 
FOUND
Tue Mar 21 09:00:46 2017 -> stream(127.0.0.1 at 30838): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(b88dc04d5457302b7624d2f6482bff43:251482) 
FOUND
Tue Mar 21 11:21:43 2017 -> stream(127.0.0.1 at 30114): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(5b3a42670eff7e189776155cf2db90a5:235340) 
FOUND
Thu Mar 23 13:45:42 2017 -> stream(127.0.0.1 at 30987): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(8137790fb59ec7ca041765463a62e348:242928) 
FOUND
Thu Mar 23 14:21:49 2017 -> stream(127.0.0.1 at 30175): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(b1ae497cce3a4c38ad55a93edcee3809:249549) 
FOUND
Thu Mar 23 14:30:20 2017 -> stream(127.0.0.1 at 30613): 
ScamNailer.Phish.en_notification_AT_made-in-china.com.UNOFFICIAL(ad638b8abc0d0af59ded4aa2835061e3:293969) 
FOUND



More information about the clamav-users mailing list