diff --git a/indicators/generic-scam-3ei9ur8a.yml b/indicators/generic-scam-3ei9ur8a.yml new file mode 100644 index 00000000..9eb0da19 --- /dev/null +++ b/indicators/generic-scam-3ei9ur8a.yml @@ -0,0 +1,18 @@ +title: generic-scam-3ei9ur8a +description: Generic scam in the form of a fake news page. Often hosted on pages.dev. + +references: + - https://urlscan.io/result/3c7ccd8c-1119-4cbd-8ae5-7764347e1c95 + - https://urlscan.io/result/70980d2c-3436-44d7-8fe5-52b39a5ee771 + - https://urlscan.io/result/89602dcc-1ac4-4820-a65e-4f2077bbbaa2 + +detection: + pageTitle: + title: + - "Work At Home Special Report!" + pageContains: + html|contains: "Home Profit System" + condition: pageTitle and pageContains + +tags: + - kit