161.35.234.152|secure05c-serveruser1a-verify-account.com|2021-11-07 20:15:53
Автор: blog
Suspected Snowshoe Spam IP Range
Based on research, analysis of network data, our ‘snowshoe’ spam detection systems, intelligence sources and our experience, Spamhaus believes that this IP address range is being used or is about to be used for the purpose of high volume ‘snowshoe’ spam emission. As a precaution therefore we are listing this IP range in an SBL… Читать далее Suspected Snowshoe Spam IP Range
phishing server
secure09b-webuser-secure.ml has address 129.159.85.224 secure09a-webauth-secure.ml has address 129.159.85.224 secure07b-webuser-secure.ml has address 129.159.85.224 secure04a-webauth-secure.ml has address 129.159.85.224 secure09b-webauth-online.ml has address 129.159.85.224 secure09a-webauth-online.ml has address 129.159.85.224 secure07b-webuser-online.ml has address 129.159.85.224 secure04a-webauth-online.ml has address 129.159.85.224 secure03a-webauth-online.ml has address 129.159.85.224
Suspected Snowshoe Spam IP Range
Based on research, analysis of network data, our ‘snowshoe’ spam detection systems, intelligence sources and our experience, Spamhaus believes that this IP address range is being used or is about to be used for the purpose of high volume ‘snowshoe’ spam emission. As a precaution therefore we are listing this IP range in an SBL… Читать далее Suspected Snowshoe Spam IP Range
Phishing payload against Netflix
hxxps[://]nxftlex-mailnirop.duckdns[.]org/cpsess92/index.html/87139405/emanage/rontend/aper_lanter/dex.ht/cprap/NETF-en/ contains an active phishing payload against Netflix users. $ host nxftlex-mailnirop.duckdns.org nxftlex-mailnirop.duckdns.org has address 143.198.52.218
phishing server
209.97.133.233|auth-serversecure5c-verify01b-account.com|2021-11-07 01:45:40 209.97.133.233|serversecure03a-verify1c-auth.myaccount03c.com|2021-11-05 13:05:32 209.97.133.233|serversecure05c-verify1a-account.com|2021-11-06 18:45:51
phishing server
143.198.123.65|boarqs.co|2021-10-31 20:55:37 143.198.123.65|boarqs.com|2021-11-05 02:41:32 143.198.123.65|boaserv-reports.co|2021-10-26 18:26:11 143.198.123.65|boaserv-reports.com|2021-11-02 14:51:16 143.198.123.65|wellsfargodevice.co|2021-11-06 20:15:43 143.198.123.65|wellsfargodevice.com|2021-11-06 19:55:55
Без названия
citionlinereview.com has address 137.184.223.195 citifraudreview.com has address 137.184.223.195
Phishing origination against Chase
This mail stream has been observed from 23.239.14.80 45.79.121.74 80.85.85.10 139.162.133.29 139.162.152.63 172.104.63.80 172.105.20.48 172.105.221.177 192.81.134.243 today. Including only one sample, the rest are identical except for the sending IP. Return-Path: <support@wordpress-683919-2253622.cloudwaysapps.com> Received: from 683919.cloudwaysapps.com (172-105-221-177.ip.linodeusercontent.com [172.105.221.177]) by x (Postfix) with ESMTP id x for <x>; Sat, 6 Nov 2021 ##:##:## +0100 (CET) Received: by… Читать далее Phishing origination against Chase
Phishing origination against Chase
This mail stream has been observed from 23.239.14.80 45.79.121.74 80.85.85.10 139.162.133.29 139.162.152.63 172.104.63.80 172.105.20.48 172.105.221.177 192.81.134.243 today. Including only one sample, the rest are identical except for the sending IP. Return-Path: <support@wordpress-683919-2253622.cloudwaysapps.com> Received: from 683919.cloudwaysapps.com (172-105-221-177.ip.linodeusercontent.com [172.105.221.177]) by x (Postfix) with ESMTP id x for <x>; Sat, 6 Nov 2021 ##:##:## +0100 (CET) Received: by… Читать далее Phishing origination against Chase