Hacked Website: 15.207.45.93

A website at this IP address is currently being (ab)used by cybercriminals to spread malicious software (malware). Host: 15.207.45.93 URL: hxxps[://]indha[.]in/wp-admin/maint/index.php/ This issue was most probably caused by a compromised website. Cybercriminals may have gained access to the mentioned website by exploiting a well known vulnerability in a Content Management System (CMS) or by using… Читать далее Hacked Website: 15.207.45.93

Опубликовано
В рубрике amazon.com

affiliate spam @upxstream.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) From: 8op1uq37k9i <jack3458smi@gmail.com> Date: Tue, 5 Oct 2021 15:38:15 -0700 Subject: vhsbmrjjc3xf2af sr8u1r969k3 ncr15ktm Re: h2zbw3uoay https://www.linkedin.com/slink?code2=AtXEToVmVDcDCCUONArgAIxGZiUbNHgKGjEEhgpOAvQLRLsDplCmPXRvVIYU&code=eMSfRdpD&code1=YIQVqbrFSRiscsEs 13.107.43.14 https://balermoplate.com/0/0/0/[] 191.101.232.119 https://tornadospins.com/index2.php?s1=350159&s2=[]&s3=2357&s4=lpid&ow=27&p=nl7mlt3as 172.67.219.81 https://washabeach.com/?[] 104.21.90.124 https://upxstream.com/click?trvid=10554&s2=[]&s1=350159&s3=2357&s4=lpid&ow=27 18.198.101.167 https://activitypassion.com/?a=162&c=4035&s2=[]&s1=350159 104.21.78.247 https://ama.estateforced.com/nl-nl/?o=4076&r=[]&a=162&sa=350159 172.67.174.41

Опубликовано
В рубрике amazon.com

spam emitter @23.251.226.7

Received: from e226-7.smtp-out.us-east-2.amazonses.com (23.251.226.7) From: Patrik Eriksson <eriksson@marketnewz.xyz> Subject: [] — Mer om vårt nästa veckas möte Date: Fri, 1 Oct 2021 08:3x:xx +0000

Опубликовано
В рубрике amazon.com

affiliate spam @whitehattracking.com

Received: from cem167.merrell.pl (40.86.172.14) From: American Home Warranty<[]> Subject: Never Pay For Covered Home Repairs Again. First Month FREE. Limited Time Date: Thu, 30 Sep 2021 15:4x:xx +0000 http://23.11.133.34.bc.googleusercontent.com/t?encv=2&v=[] 34.133.11.23 https://brandingvalor.com/0/2/7201/[] 193.124.15.228 ttp://go.whitehattracking.com/aff_c?offer_id=830&aff_id=1852&aff_sub=350020&aff_sub2=[] 18.209.255.248 https://www.americanhomewarranty.net/index.php?offer_id=830&aff_id=1852&sub1=350020&sub2=[]&sub3=&transaction_id=[] 172.81.118.28

Опубликовано
В рубрике amazon.com

idropnews.com spammers @52.22.187.16

52.22.187.16 = idropnews.com idrop-1790182703.us-east-1.elb.amazonaws.com The following related hostnames used for «snowshoe» spamming blog.idrop.io eye.idrop-news.com fb.idropnews.com idrop-news.com idrop.email idrop.io idrop.news idrop.us idropnews.com mail.idrop.us mailhost.idrop-news.com mailin.idrop.us master.idropnews.com mta165.idrop.io mta166.idrop.io mta168.idrop.io mta171.idrop.io mta172.idrop.io mx2.idrop.io mx3.idrop.io newsletter.idrop.io s1.idropnews.com seo.idropnews.com simple.idrop-news.com www.idrop-news.com www.idrop.email www.idrop.io www.idrop.news www.idrop.us — Domain Name: IDROPNEWS.NET Creation Date: 2013-10-02 20:14:00Z Registrar Registration Expiration Date: 2014-10-02 20:14:00Z… Читать далее idropnews.com spammers @52.22.187.16

Опубликовано
В рубрике amazon.com

Abused / misconfigured newsletter service (listbombing)

The host at this IP address is being (ab)used to «listbomb» email addresses: From: hello@marciakorenhof.com Subject: Vanavond om 20.00 Live Q&A op Instagram 🙄 Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns.… Читать далее Abused / misconfigured newsletter service (listbombing)

Опубликовано
В рубрике amazon.com

sqlservercentral.com (Newsletter with dirty list)

SQL Server Central, a website about SQL, has a list to which it sends daily emails. That list is clearly very old and unmaintained, and SQL Server Central is as a consequence hitting spamtraps. This list desperately needs cleaning, and a new process to ensure that recipients of this email still want it and are… Читать далее sqlservercentral.com (Newsletter with dirty list)

Опубликовано
В рубрике amazon.com

FastFlux hosting provider: bulletproof.su — who use hacked servers to host malware, phish, etc.

https://bulletproof-hosting.com >>> https://bulletproof.su/? >>> https://t.me/ffservice? bulletproof.su. 14399 IN A 54.153.104.186 _________________ Was: bulletproof.su. 14399 IN A 13.57.17.224 13.57.17.224 bulletproof-hosting.net 2021-07-20 08:00:53 13.57.17.224 pinkshop.info 2021-07-21 13:54:38 _________________ Was: bulletproof.su. 14400 IN A 54.183.0.249 bulletproof-hosting.com. 14400 IN A 54.183.0.249 _________________ Was: bulletproof.su. 14400 IN A 44.193.18.240 bulletproof-hosting.com. 14400 IN A 44.193.18.240 _________________ Was: bulletproof.su. 14399 IN A… Читать далее FastFlux hosting provider: bulletproof.su — who use hacked servers to host malware, phish, etc.

Опубликовано
В рубрике amazon.com

spam emitter @54.240.7.17

Received: from a7-17.smtp-out.eu-west-1.amazonses.com (54.240.7.17) From: Marie Mohamed <marie@economychats.com> Subject: Enligt överenskommelsen [], mer information inför mötet på Måndag Date: Tue, 17 Aug 2021 06:4x:xx +0000

Опубликовано
В рубрике amazon.com

excelaccountant.com (MX) (Pioneer Educator)

Amazon hosts the A record and website of the domain freecpewebinar.com. The owners of this domain are using ESP Benchmark Email to send spam emails to scraped, purchased or appended lists. Amazon: please deal with this spam hosting per your AUP/TOS. Received: from pmta604.dedicated.bmsend.com (pmta604.dedicated.bmsend.com [12.174.236.139]) Date: Sat, 21 Aug 2021 12:##:## -0400 From: Bob… Читать далее excelaccountant.com (MX) (Pioneer Educator)

Опубликовано
В рубрике amazon.com