Автор: blog

domain used in spam operation — whskysr.com 34.120.60.197 —

storage.googleapis.com. 150 IN A 216.58.193.208 X-SMTP-LINK: https://storage.googleapis.com/mayriscodaggy/1us.html#r.php?t=c&d=x&l=x&c=x X-SMTP-LINK: https://storage.googleapis.com/mayriscodaggy/1us.html#opt.php?d=x&l=403&c=x&em=x X-SMTP-LINK: https://storage.googleapis.com/mayriscodaggy/1us.html#r.php?t=u&d=x&l=403&c=x >>> http://majabgy.store/r.php? majabgy.store. 59 IN A 54.36.130.6 54.36.130.6 adssmaster.xyz 2021-06-07 01:01:00 54.36.130.6 mail.majabgy.store 2021-06-07 17:18:23 54.36.130.6 majabgy.store 2021-06-07 15:26:21 54.36.130.6 mediacooler.xyz 2021-06-07 19:26:20 ___________________ Received: from dc37.kdata.vn (HELO kam11asig11.com) (103.109.37.105) by xxxxx; Sun, 06 Jun 2021 21:22:13 +0000 Subject: (1)Play & Keep your Winnings… Читать далее Spamming storage.googleapis.com/mayriscodaggy

The host at this IP address is being (ab)used to «listbomb» email addresses: From: stefan.js.maraj@gmail.com Subject: Re: Writer looking to contribute Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns. Problem resolution ============================… Читать далее Abused / misconfigured newsletter service (listbombing)

sefagusten.top. 599 IN A 35.247.231.63 caramelcorp.cc. 599 IN A 35.247.231.63 35.247.231.63 sefagusten.top 2021-06-08 15:56:58 35.247.231.63 kolaosmaoiamal.top 2021-06-08 12:32:13 35.247.231.63 oxymy.xyz 2021-06-08 10:47:17 35.247.231.63 caramelcorp.cc 2021-06-08 03:50:54 35.247.231.63 corpleaks.net 2021-06-07 17:16:48 35.247.231.63 siwirnes.top 2021-06-07 17:06:55 35.247.231.63 vutyfilos.top 2021-06-07 07:16:52 ________ sefagusten.top. 599 IN A 35.245.37.223 35.245.37.223 sefagusten.top 2021-05-24 05:56:04 35.245.37.223 caramelcorp.cc 2021-05-24 03:45:48 35.245.37.223 lukabukazykasas.top 2021-05-23… Читать далее Hosting bank phishing domains

According to our telemetry and our own intelligence, the host at this IP address has been setup by cyber criminals for the exclusive purpose of hosting phishing sites, malware distribution sites and/or botnet controllers. We therefore advise our users to block any traffic from/to this IP address. To solve this abuse issue, we recommend ARIN… Читать далее Malware / Botnet / Phishing hosting server @34.141.223.91

Received: from enter.chornpiokpe.vip (20.68.178.253) From: Senter for fysisk bevegelighet<Paypal.com> Subject: Denne kuren styrker leddene pa 28 dager! Date: Wed, 22 Sep 2021 13:4x:xx +0000 (UTC) http://190.123.45.39/?[] 190.123.45.39 https://smitlaub.com/?a=3284&oc=10736&c=31291&m=3&s1=&s2=[]&s3=[] 34.90.27.126 ———————————- Received: from [193.124.118.81] (helo=idm.telekom.com) From: amazon <[]@[]-amazon.us> Subject:- Exclusive Rewards Worth Over $100 Date: Tue, 17 Aug 2021 10:0x:xx +0200 https://bit.ly/3g17mB6#/[] 67.199.248.10 http://bestoffers.digital/#/cl/[] 194.150.214.121 https://centerblace.com/?a=4010&oc=10042&c=35006&m=3&s1=18&s2=1285_6&s3=[]… Читать далее Spamvertised websites

Hosting a mass of domains used in spamming: 34.90.173.82 premcher.com 2021-06-13 17:16:03 34.90.173.82 paperlelie.com 2021-06-13 17:15:56 34.90.173.82 macmirrow.com 2021-06-13 17:15:55 34.90.173.82 aptrk16.com 2021-06-13 16:06:17 34.90.173.82 paulmeef.com 2021-06-13 13:45:53 34.90.173.82 pinkvioly.com 2021-06-13 13:45:43 34.90.173.82 wolfshoest.com 2021-06-13 13:45:36 34.90.173.82 opidata.com 2021-06-13 06:05:59 34.90.173.82 goldisabel.com 2021-05-05 23:45:51 34.90.173.82 roostwo.com 2021-02-06 10:47:19 34.90.173.82 interfasta.com 2021-01-12 16:33:59 34.90.173.82 bracepurol.com 2021-01-07… Читать далее Spamming magipapa.club / pinkvioly.com / senchones-consclean.icu / wingcards.com / silencil.com etc.

$ host lihi1.cc lihi1.cc has address 35.244.149.249 This host appears as the payload in a plethora of phishing spam sent over text messaging.

The host at this IP address is being (ab)used to «listbomb» email addresses: From: stefan.js.maraj@gmail.com Subject: Re: Writer looking to contribute Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns. Problem resolution ============================… Читать далее Abused / misconfigured newsletter service (listbombing)

Spammer hosting located here: https://tinyurl.com/ygat9k62 -> http://supernewmarket.com —> https://snackslabs.com/X —> https://eighttransfer.com/index2.php?id=X&s1=X&s2=X&s3=X&p=X —> https://draconicdome.com/?X —-> https://airxdrop.com/click?trvid=X&s2=X&s1=X&s3=X ——> https://www.shrtmpbck.com/X/X/?sub2=X ——> https://fastyslim.de/?oid=X&affid=X&sub1=X&sub2=&sub3=X $ dig +short www.shrtmpbck.com 34.102.170.20 Spam sample ========================================= Received: from musta.ch (unknown [194.150.215.76]) by X (Postfix) with ESMTP id X for <X>; Sat, 19 Jun 2021 X Received: from smtp.9772080168636769.2.4kbxefUBhxCNwEZ.org (enr2-mrelay-01.dV7y9.dV7y9.org. ) by mx.google.com with ESMTP… Читать далее Spammer hosting @34.102.170.20