Hello and welcome to the Friday, March 21st, 2025 edition of the Sands Internet Storm Center's Stormcast. My name is Johannes Ulrich and I'm recording from Jacksonville, Florida.

Well, today I wrote a little bit of mixed diary. First of all, just introducing that we reorganize some of our data feeds a little bit.

We have some more or less static reports that we recreate once an hour, once a day,

depending on the report, and they may be more efficient for you if you want to use our data.

Instead of querying, for example, our API for

individual IP addresses, you can download here, for example, our Threat Intel Feed that lists

all of the IP addresses for which we had recently activity and then some labels going with

that IP address.

That sort of should speed things up and, of course, also takes a little bit load of our

API if you're using this.

In addition, sort of a little incident here I called it.

It's something that we have seen in the past, but haven't seen for a while.

And yesterday we got yet another email from sort of a search engine optimization scam.

That's at least sort of where I put it.

The email itself basically claims that a link that we have in a podcast episode is no longer active,

and they give you a new URL to replace that link with.

Well, the problem is that, first of all,

the email didn't come from the organization

that actually owned this particular web page

happened to be the Electronic Frontier Foundation,

and they're going sort of now after these popular links with these scams.

And then, of course, the new link they offered,

...