Carding fraud site/forum: carder.one

https://carder.one/showthread.php?t=24062 carder.one. 234 IN A 172.67.153.164 carder.one. 234 IN A 104.27.184.215 carder.one. 234 IN A 104.27.185.215 https://forum.carder.one/showthread.php?t=25154 forum.carder.one. 237 IN A 172.67.153.164 forum.carder.one. 237 IN A 104.21.90.62 Related to: dumps.biz https://carder.one/img/dump-pin.gif dumps.biz. 299 IN A 172.67.208.70 dumps.biz. 299 IN A 104.31.85.67 dumps.biz. 299 IN A 104.31.84.67 _________________ https://uas-service.ru/ https://carder.one/img/rdp.gif

Spamvertised website

Received: from mail66.gmarket.com (v118-27-49-66.eqzg.static.cnode.io [118.27.49.66]) From: «RAY-BAN» <notice@gmarket.com> Date: 19 Oct 2020 09:0x:xx +0000 Subject: Take one last action in 2020.Start the Shopping time on Cyber Day URL: https://mail.fco-gimeno.com/SubscribeClick.aspx?[] Server IP address is 172.67.209.61 => URL: https://www.rbzbp.com/ Server IP address is 172.67.141.160

Spamvertised website

Received: from exs3.inc.com (191.234.173.75) From: Еlectricity 𝔅ill <DlLVeif@inc.com> Subject: ★★𝓌eird Guy★★ Finds A Legit Way To Cut Energy Bills By 73.5%l Date: Sat, 17 Oct 2020 21:4x:xx +0200 URL: http://guidesshop.online/[] Server IP address is 104.24.127.251 => Location: https://dachme.com/portable-solar-energy-dak-review/?aff_sub1=1&aff_sub2=4127_1&aff_sub3=[] Server IP address is 161.97.91.218 => Location: https://644dbprzc7j6qmyls5spz66mbg.hop.clickbank.net/?tid=CHAKDAK Server IP address is 35.155.121.25

Spamvertised website

Received: from exs3.inc.com (191.234.173.75) From: Еlectricity 𝔅ill <DlLVeif@inc.com> Subject: ★★𝓌eird Guy★★ Finds A Legit Way To Cut Energy Bills By 73.5%l Date: Sat, 17 Oct 2020 21:4x:xx +0200 URL: http://guidesshop.online/[] Server IP address is 104.24.127.251 => Location: https://dachme.com/portable-solar-energy-dak-review/?aff_sub1=1&aff_sub2=4127_1&aff_sub3=[] Server IP address is 172.67.181.105 => Location: https://644dbprzc7j6qmyls5spz66mbg.hop.clickbank.net/?tid=CHAKDAK Server IP address is 35.155.121.25

Spamvertised website

Spamming through Google Docs. URL: https://instagram.com@clck.ru/RXYQB Server IP address is 213.180.204.221 => Location: https://sba.yandex.net/redirect?url=https%3A%2F%2Fgls-mail.xyz&client=clck&sign=96ec9bcb1c9d5c564db8ebb242e68f18 => Server IP address is 77.88.21.232 Location: https://gls-mail.xyz => Server IP address is 172.67.143.41 Location: https://mail-msg.club/?u=f1fp806&o=malkdbw&t=keit Server IP address is 104.27.150.223 Location: https://buildshouldersspell11.live/7440827207/?u=f1fp806&o=malkdbw&t=keit&f=1&sid=t[] Server IP address is 5.189.217.13

Spamvertised website

Received: from SRp.amazon.com (152.32.151.15 [152.32.151.15]) From: «RayBan» <rayban@SRp.amazon.com> Subject: Best Sunglasses — Bestsellers and Staff Picks Up to 40% Off Date: Sat, 24 Oct 2020 22:0x:xx +0800 URL: https://mail.phkrn.com/SubscribeClick.aspx?[] Server IP address is 104.18.62.238 => https://www.glassesrb.com/ Server IP address is 172.67.139.160

Spamvertised website

Received: from SRp.amazon.com (152.32.151.15 [152.32.151.15]) From: «RayBan» <rayban@SRp.amazon.com> Subject: Best Sunglasses — Bestsellers and Staff Picks Up to 40% Off Date: Sat, 24 Oct 2020 22:0x:xx +0800 URL: https://mail.phkrn.com/SubscribeClick.aspx?[] Server IP address is 104.18.62.238 => https://www.glassesrb.com/ Server IP address is 172.67.139.160

Hosting porn spam site: urseductivegirls.com

http://blog4-near-best-babyes.blogspot.com/ >>> <script>window.location=’https://urseductivegirls.com/?utm_source=Zv7U13WsKpPs9′</script> ________ urseductivegirls.com. 299 IN A 172.67.155.223 urseductivegirls.com. 299 IN A 104.31.92.239 urseductivegirls.com. 299 IN A 104.31.93.239 http://lovefor-near-buitifully-girlfriends.blogspot.com/ >>> <script>window.location=’https://urseductivegirls.com/?utm_source=Zv7U13WsKpPs9′</script> ________

Spamvertised website

Received: from subscriber175.soupincm.com (subscriber175.soupincm.com [118.27.50.175]) From: «Pandora Jewellery» <notice@soupincm.com> Date: 31 Oct 2020 04:4x:xx +0800 Subject: Discount deals and best-selling items update,Click here! https://subscriber.7801cai.com/SubscribeClick.aspx?[] => https://www.wellpand.com/ subscriber.7801cai.com. 300 IN A 172.67.219.80 subscriber.7801cai.com. 300 IN A 104.27.184.20 subscriber.7801cai.com. 300 IN A 104.27.185.20 www.wellpand.com. 600 IN A 172.87.213.179

Spamvertised website

Received: from mail.amazon.com (postman.aether.earth [209.141.45.181]) From: «RAY-BAN» <no-reply@amazon.com> Date: 31 Oct 2020 14:5x:xx +0800 Subject: New Year Savings to Renew You! https://mail.hbkendejim.com/SubscribeClick.aspx?[] => https://www.rbglse.com/ mail.hbkendejim.com. 300 IN A 104.27.135.52 mail.hbkendejim.com. 300 IN A 172.67.211.208 mail.hbkendejim.com. 300 IN A 104.27.134.52 www.rbglse.com. 600 IN A 107.178.166.240