Автор: blog

https://secretmessge.blogspot.com >>> http://secretmessge.site/index.html ;secretmessge.blogspot.com. IN A ;; ANSWER SECTION: secretmessge.blogspot.com. 3599 IN CNAME blogspot.l.googleusercontent.com. blogspot.l.googleusercontent.com. 299 IN A 172.217.5.65 secretmessge.site. 21585 IN A 162.251.120.74 >>> https://dreamgirlsvv.com/ Received: from worldofthegods.com (mail.worldofthegods.com [188.247.224.139]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by xx; Fri, 11 Sep 2020 00:22:34 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt;… Читать далее Using hacked servers to send spam for: secretmessge.blogspot.com

One of the phshers from Sendgrid has apparently moved off from Sendgrid and onto a Digital Coean VPS, with the phish URI located on storage.googleapis.com. Google: You provided this service and made it available to Internet users. Please *fix* this problem ASAP. 🙁 Received: from send0.riverrockscvs.com (unknown [162.243.165.191]) Date: 10 Sep 2020 23:##:## -0700 From:… Читать далее Live Phish Site! (Server: storage.googleapis.com)

Spammer hosting located here: https://storage.googleapis.com/b8e5d7c64eab4dcea7b3/6e1352037146175b04be#cl/XXX -> http://saletoyou.best/XXX —> https://notorioushub.com/XXX —> https://meetsap.com/?X $ dig +short storage.googleapis.com 172.217.168.48 172.217.168.80 216.58.215.240 Spam sample ================================================ Received: from ug18.newmodels.xyz (unknown [46.148.238.57]) by X (Postfix) with ESMTP id X for <X>; Tue, 15 Sep 2020 X X-Received: by 2002:a37:6287:: with SMTP id X; Tue, 15 Sep 2020 X Date: Tue, 15… Читать далее Spammer hosting @216.58.215.240

Spammer hosting located here: https://storage.googleapis.com/b8e5d7c64eab4dcea7b3/6e1352037146175b04be#cl/XXX -> http://saletoyou.best/XXX —> https://notorioushub.com/XXX —> https://meetsap.com/?X $ dig +short saletoyou.best 34.72.101.159 Spam sample ================================================ Received: from ug18.newmodels.xyz (unknown [46.148.238.57]) by X (Postfix) with ESMTP id X for <X>; Tue, 15 Sep 2020 X X-Received: by 2002:a37:6287:: with SMTP id X; Tue, 15 Sep 2020 X Date: Tue, 15 Sep 2020… Читать далее Spammer hosting @34.72.101.159

Why does layerhost keep giving the same phisher so many IP addresses? 134.73.130.194 130-194.179581.com 134.73.130.195 130-195.179581.com 134.73.130.196 130-196.179581.com 134.73.130.197 130-197.179581.com 134.73.130.198 130-198.179581.com 134.73.130.199 130-199.179581.com Received: from 130-228.179581.com (130-228.179581.com [134.73.130.228]) (using TLSv1.2 From: Amazon.co.jp <account-update@amazon.co.jp> To: x <x> Subject: Amazon.co.jp アカウント所有権の証明（名前、その他個人情報）の確認 Date: Wed, 16 Sep 2020 x +0800 状態: 異常は更新待ちです <https://japan.5izhl1givwy7o.cloud/dashboard/inspect.php?mil=motoko@ixp.jp>所有権の証明 Resolving japan.5izhl1givwy7o.cloud (japan.5izhl1givwy7o.cloud)… 35.236.115.184 Connecting… Читать далее Chinese phisher trying to phish Amazon JP (landing site.)

9/18/2020: This domain has moved to a new IP address at Google, so listing that IP address to protect users til the owners of the domain resolve their spam issues. ]$ host animationstudio.io animationstudio.io has address 35.241.6.193 animationstudio.io mail is handled by 20 eforward5.registrar-servers.com. animationstudio.io mail is handled by 15 eforward4.registrar-servers.com. animationstudio.io mail is handled… Читать далее animationstudio.io (Spam Landing Page)

https://soo.gd/ieiL >>> http://grin23.info/ad1?3dw43u30 >>> https://yjjdz.findyourlovemate.com/c/x?s1=x&s2=x&j1=x&j3=x >>> https://www.mylocalcrush.com/landing2?cat=xx&pi=xx&pt1=xx&lp=&click_id=&t_click=&ban=&j1=1&j2=&j3=1&j4=&j5=&j6=&j8= ;; ANSWER SECTION: grin23.info. 599 IN A 95.216.99.227 yjjdz.findyourlovemate.com. 3599 IN CNAME llbkq.abtrcker.com. llbkq.abtrcker.com. 3599 IN CNAME j1.jump6geo.com. j1.jump6geo.com. 59 IN A 54.205.191.137 www.mylocalcrush.com. 3068 IN CNAME mylocalcrush.com. mylocalcrush.com. 3215 IN A 34.67.231.254 Also seen: 2019-11-05 nearbycharms.com A 34.67.231.254 2019-11-22 ourcasualcontact.com A 34.67.231.254 2019-12-10 sheezhot.com A 34.67.231.254 Received:… Читать далее Server hosting porn spam: mylocalcrush.com

2020-11-06 still active, listing reactivated 2020-08-19 02:43:48 verifiedcarder.ws A 35.205.249.35 __________________ 2020-05-04 04:32:54 cardingforum.net A 35.187.63.8 2020-05-01 15:01:13 verifiedcarder.ws A 35.187.63.8 __________________ Was: verifiedcarder.ws. 300 IN A 185.11.145.242 __________________ Was: v-market.pro. 600 IN A 185.189.12.78 v-market.pro. 600 IN A 212.60.5.154 _________________ Was: v-market.pro. 600 IN A 185.239.51.212 v-market.pro. 600 IN A 94.250.248.104 _________________ Was: 2019-03-04… Читать далее Carding fraud site/forum: verifiedcarder.ws

https://block-chain-ssl-dashboard-login.blogspot.com/?mail=true&data=sgefpwzg2d5g539sqnlg43tkeq0qdgsd0vpooj6u3e7w17nz8m ;; ANSWER SECTION: block-chain-ssl-dashboard-login.blogspot.com. 3599 IN CNAME blogspot.l.googleusercontent.com. blogspot.l.googleusercontent.com. 299 IN A 172.217.4.161

docs.google.com. 72 IN A 142.250.68.46 Received: from mail-oo1-f69.google.com (mail-oo1-f69.google.com [209.85.161.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by xx; Thu, 1 Oct 2020 09:22:49 -0400 (EDT) Received: by mail-oo1-f69.google.com with SMTP id xx for xx; Thu, 01 Oct 2020 06:22:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20161025; h=mime-version:date:auto-submitted:message-id:subject:from:to; bh=xx X-Google-DKIM-Signature:… Читать далее Botnet spammed docs.google.com URL