blog — Страница 237

Credit card fraud gang hosting (DNS): zuganov-lox.ru (hacked-paypal-accounts-dump.ru / fe-shop.su / vmad.su / amazingdumpsshop.ru / cvv-fullz-shop.ru etc.)

ns1.zuganov-lox.ru. 14400 IN A 83.220.174.184 ns2.zuganov-lox.ru. 14400 IN A 85.143.220.177 ____________________ Was: ns1.zuganov-lox.ru. 14400 IN A 109.248.133.96 ns2.zuganov-lox.ru. 14400 IN A 185.117.155.168 ____________________ Was: ns1.zuganov-lox.ru. 14400 IN A 94.142.143.206 ns2.zuganov-lox.ru. 14400 IN A 185.170.10.55 ____________________ Was: ns1.zuganov-lox.ru. 14400 IN A 185.87.51.144 ns2.zuganov-lox.ru. 14400 IN A 138.124.182.68 ____________________ Was: ns1.zuganov-lox.ru. 14399 IN A 54.67.78.34 ns2.zuganov-lox.ru. 14399… Читать далее Credit card fraud gang hosting (DNS): zuganov-lox.ru (hacked-paypal-accounts-dump.ru / fe-shop.su / vmad.su / amazingdumpsshop.ru / cvv-fullz-shop.ru etc.)

Spamvertised website

Received: from panzertank.eu.com (panzertank.eu.com. [185.122.223.224]) Subject: 🔔 Laatste mededeling: [] Cheque — Uw geld wacht! 💲150.000💰▶️ Bevestiging: #[] Date: Wed, 06 Oct 2021 14:1x:xx +0000 From: SlotHunter 🎰 <[]> https://storage.googleapis.com/hamnad/uurtmmm.html#[] 173.194.69.128 http://crystals.com.de/rd/[] 167.99.245.231 https://beakhair.com/?a=2812&oc=13923&c=39460&m=3&s1=12&s2=[]&s3=[] 34.91.99.156 http://tracking.m4rv3l.com/aff_c?offer_id=300&aff_id=1042&url_id=178&aff_sub=[]&aff_sub3=2812 176.34.200.217 https://www.slothunter.com/promotions/welcome-300?stag=[]&__layerref=http%3A%2F%2Fcrystals.com.de%2F 104.18.2.88

affiliate spam @m4rv3l.com

Tofsee botnet controller @77.222.55.43

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 77.222.55.43 on port 421 TCP: $ telnet 77.222.55.43 421 Trying 77.222.55.43… Connected to 77.222.55.43. Escape character… Читать далее Tofsee botnet controller @77.222.55.43

AsyncRAT botnet controller @5.189.186.155

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 5.189.186.155 on port 7878 TCP: $ telnet 5.189.186.155 7878 Trying 5.189.186.155… Connected to 5.189.186.155. Escape character… Читать далее AsyncRAT botnet controller @5.189.186.155

affiliate spam @singlesrussian.com

Received: from ssay.mta36.appspot.com (40.86.247.121) From: Single Russians <admin@single-russians.com> Subject: These women are ONLY looking for long-term relationships. Date: Wed, 06 Oct 2021 20:3x:xx +0200 http://stackfullrush.com/cl/[] 52.179.96.156 https://prenzy.page.link/H3Ed?s1=1&s2=1487_10&s3=[] 142.250.217.174 https://www.thedealsto.com/[] 89.43.30.24 https://www.y4pamtrk.com/[]/?source_id=1477&sub1=[] 34.120.18.211 https://www.singlesrussian.com/qa/register01.php?aid=1374&oid=CP274764&qpid_offer_id=SSR_826851TMEDK&qpid_subid=425&qpid_clickid=p[&source_tag=1477 18.144.111.139

phishing sites

https://accounts-becu.org/BECU/ $ host accounts-becu.org accounts-becu.org has address 68.65.120.182

phishing server

lnstagramshelpbadge.com has address 20.104.50.216

phishing server

businessverifyforsecure04c.com has address 88.198.19.131 businessverifyforsecure03c.com has address 88.198.19.131 businessverifyforsecure02c.com has address 88.198.19.131 businessverifyforsecure01c.com has address 88.198.19.131 businessverifyforsecure05c.com has address 88.198.19.131

Malware / Botnet / Phishing hosting server @194.32.248.86

According to our telemetry and our own intelligence, the host at this IP address has been setup by cyber criminals for the exclusive purpose of hosting phishing sites, malware distribution sites and/or botnet controllers. We therefore advise our users to block any traffic from/to this IP address. Malware botnet controller located at 194.32.248.86 on port… Читать далее Malware / Botnet / Phishing hosting server @194.32.248.86