Автор: blog

Stolen credit card data websites: bestcvvshop.ru. 599 IN A 35.239.245.68 bestcvvshop.ru. 599 IN A 35.222.206.117 cc4you.su. 599 IN A 35.239.245.68 cc4you.su. 599 IN A 35.222.206.117 spamming-tools.cc. 599 IN A 35.239.245.68 spamming-tools.cc. 599 IN A 35.222.206.117 royaldumps.su. 599 IN A 35.239.245.68 royaldumps.su. 599 IN A 35.222.206.117 _________________ Was: host bestcvvshop.ru bestcvvshop.ru has address 34.121.110.90 host cc4you.su… Читать далее Cybercriminal credit-card theft carding gang at bestcvvshop.ru, cvvstore.cc, cc4you.su, kingscard.cc etc.

$ host 0090450.com 0090450.com has address 104.197.152.65 # whois.verisign-grs.com Domain Name: 0090450.COM Registry Domain ID: 2600449794_DOMAIN_COM-VRSN Registrar WHOIS Server: grs-whois.aliyun.com Registrar URL: http://www.alibabacloud.com Updated Date: 2021-03-25T12:16:15Z Creation Date: 2021-03-25T12:16:15Z Registry Expiry Date: 2022-03-25T12:16:15Z Registrar: ALIBABA.COM SINGAPORE E-COMMERCE PRIVATE LIMITED Registrar IANA ID: 3775 Registrar Abuse Contact Email: domainabuse@service.aliyun.com Registrar Abuse Contact Phone: +86.95187 Domain Status:… Читать далее Phishing payload against Rogers (Canada)

The following IP addresses are sending spam for Labas Group (aka Nermeka, Toltrade, Geldaude, etc.), a spam operation that has years of SBL listings behind it. SENDING IPs: 81.28.104.223 mta223.marketing.labas-grupe.com 81.28.104.224 mta224.marketing.labas-grupe.com 81.28.104.225 mta225.marketing.labas-grupe.com 81.28.104.226 mta226.marketing.labas-grupe.com 81.28.104.227 mta227.marketing.labas-grupe.com 81.28.104.228 mta228.marketing.labas-grupe.com … 81.28.104.252 mta252.marketing.labas-grupe.com 81.28.104.253 mta253.marketing.labas-grupe.com 81.28.104.254 mta254.marketing.labas-grupe.com SPAM SAMPLE: Received: from mta##.marketing.labas-grupe.com (mta###.marketing.labas-grupe.com [81.28.104.##]) Date:… Читать далее labas-grupe.com / bauhirelabas.com

Stolen credit card data websites. approved-cc.su. 599 IN A 35.247.248.113 ______________ Was: approved-cc.su. 599 IN A 104.199.36.198 ______________ Was: unicc-bazar.cm. 599 IN A 34.89.81.205 fe-shop.ru. 599 IN A 35.228.7.192 approved-cc.su. 599 IN A 34.65.237.185 trump-dumps.ru. 599 IN A 34.65.33.2 megasearch.su. 899 IN A 194.5.249.112 ______________ Was: unicc-bazar.cm. 599 IN A 194.5.249.111 ______________ Was: unicc-bazar.cm. 599… Читать далее Carding fraud site/forums uniCC-bazar.cm / fe-shop.ru / approved-cc.su / trump-dumps.ru

domain used in spam operation —- tizifi.com —-

4/05/2021: This domain ha moved from Digital Ocean to Google hosting. It has not cleared up issues with Spamhaus, and is actively involved in advertising its services through hailstorm snowshoe spam. We are listing thie hosting IP to protect users from spam and document the issue for Google. $ host 212medya.com 212medya.com has address 34.107.28.143… Читать далее 212medya.com

The host at this IP address is being (ab)used to «listbomb» email addresses: From: saroj@reactnatives.tech Subject: App Proposal… Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns. Problem resolution ============================ In order to… Читать далее Abused / misconfigured newsletter service (listbombing)

Received: from mail-pf1-x443.google.com ([2607:f8b0:4864:20::443]) From: hovanhoa123@gmail.com Date: Thu, 15 Jul 2021 22:19:54 -0700 Subject: 💚 CLIPPERPRO Toenail Clipper! The High-Quality, Precision Nail Cutting Tool With Surgical Steel Blades! URL: http://thuckhuyanuaroine.xyz/ Server IP address is 192.64.119.86 Location: https://www.whskysr.com/6PD48JW/5SM35TJ/?uid=8964&sub1=16-7 Server IP address is 34.120.60.197 Location: https://www.shopclipperpro.com/en/pre-st-toenail.html?loader=1&fomo=1&Affid=3533&s1=16-7&s2=&s3=&s4=2735&s5=621665167236499ea072cac30a89425f&domain1=www.whskysr.com&network_id=69 Server IP address is 99.84.238.112 ————————— Received: from mail-qv1-xf44.google.com ([2607:f8b0:4864:20::f44]) From:… Читать далее spam support (domains)

Received: from 00373c75.ceracareffjs.xyz (unknown [45.134.23.61]) Date: Tue, 13 Apr 2021 00:0x:xx -0700 From: «Denti Strength» <DentiStrength@ceracareffjs.xyz> Subject: This popular toothpaste ROTS your teeth and gums http://www.ceracareffjs.xyz/[]/tindex1.html => https://mwexciting.com/6521/190/6/?&subid=STRENGHT_13APRIL2021TP => https://www.ph88trk.com/35DXPKN/9TK4PN/?uid=557&sub1=MW&sub2=CPA&sub3=DS_MW_Email_CPA&sub4=[]&sub5=190 => https://www.dentistrength.com/dsqwerv1/index.php?utm_source=1331&utm_medium=CPA&utm_campaign=DS_1331&utm_term=[]&utm_content=190&oid=179&ustid=[] www.ceracareffjs.xyz. 1799 IN A 45.134.23.61 mwexciting.com. 1800 IN A 169.61.196.20 www.ph88trk.com. 300 IN A 34.98.111.176 www.dentistrength.com. 3600 IN CNAME dentistrength.com. dentistrength.com. 900 IN… Читать далее affiliate spam @ph88trk.com

Stolen credit card data websites. approved-cc.su. 599 IN A 35.247.248.113 ______________ Was: approved-cc.su. 599 IN A 8.209.65.162 ______________ Was: fe-shop.ru. 599 IN A 35.228.42.170 approved-cc.su. 599 IN A 35.204.61.244 ______________ Was: unicc-bazar.cm. 599 IN A 104.247.81.10 ______________ Was: unicc-bazar.cm. 599 IN A 79.174.12.93 ______________ Was: unicc-bazar.cm. 599 IN A 193.32.188.53 ______________ Was: unicc-bazar.cm. 599 IN… Читать далее Carding fraud site/forums: approved-cc.su (fe-shop.ru / approved-cc.su / trump-dumps.ru / megasearch.su / carderspro.com)