Spamvertised website

Received: from mail.amazon.com (209.141.42.136 [209.141.42.136]) From: «RAY-BAN» <notice@amazon.com> Date: 31 Oct 2020 16:0x:xx +0800 Subject: Discount deals and best-selling items update,Click here! https://mail.wufxi.com/SubscribeClick.aspx?[] => https://www.rbglse.com/ mail.wufxi.com. 300 IN A 172.67.148.133 mail.wufxi.com. 300 IN A 104.31.86.147 mail.wufxi.com. 300 IN A 104.31.87.147 www.rbglse.com. 600 IN A 107.178.166.240

Spamvertised website

Received: from mail.amazon.com (118.194.236.59 [118.194.236.59]) From: «Pandora Jewellery» <no-reply@amazon.com> Date: 11 Nov 2020 17:4x:xx +0800 Subject: Anniversary, don’t wait, miss it and wait 1 year. https://subscriber.snhb8.com/SubscribeClick.aspx?[]= => https://www.wpdsale.com/ subscriber.snhb8.com. 208 IN A 104.28.22.165 subscriber.snhb8.com. 208 IN A 172.67.181.220 subscriber.snhb8.com. 208 IN A 104.28.23.165 www.wpdsale.com. 300 IN A 172.67.196.35 www.wpdsale.com. 300 IN A 104.27.139.122 www.wpdsale.com. 300… Читать далее Spamvertised website

Selling access to hacked server proxies to cybercriminals: dichvusocks.us

We were told they were shut down. Seems not. dichvusocks.us. 6 IN A 104.21.234.143 dichvusocks.us. 6 IN A 104.21.234.142 https://check.dichvusocks.us/ check.dichvusocks.us. 299 IN A 104.21.234.142 check.dichvusocks.us. 299 IN A 104.21.234.143 dichvusocks.us. 299 IN A 192.124.249.62 tbgyddkp.dichvusocks.us. 299 IN A 78.47.251.152 ________________ Was: ;; QUESTION SECTION: ;dichvusocks.us. IN A ;; ANSWER SECTION: dichvusocks.us. 299 IN A… Читать далее Selling access to hacked server proxies to cybercriminals: dichvusocks.us

Botnet spammed site: portfolio.yoga

drive.google.com. 153 IN A 172.217.5.78 https://drive.google.com/file/d/1QPyuwrXAJkMRk4JI0MPdkp8vBz_WafpK/edit >>> https://portfolio.yoga/go.php ;; ANSWER SECTION: portfolio.yoga. 234 IN A 104.31.69.38 portfolio.yoga. 234 IN A 172.67.215.73 portfolio.yoga. 234 IN A 104.31.68.38 Greetings, Payment that you have sent was timely approved. All docs necessary for delivery are attached to this e-mail. you can access your documents via this link. your file

Zoltán Zarka

Received: from batreality.com (unknown [5.188.226.222]) Subject: Domain Notification for [] : This is your Final Notice of Domain Listing X-PHP-Originating-Script: 1000:alexusMailer_v2.0.php From: [] Date: Thu, 25 Feb 2021 21:4x:xx +0000 http://artadeafi.com/domain/?domain=[] artadeafi.com. 300 IN A 172.67.222.67 artadeafi.com. 300 IN A 104.21.38.111 —————————- Received: from paradecatch.com (paradecatch.com [5.188.6.253]) Subject: Domain Notification for [] : This is… Читать далее Zoltán Zarka

Spamming from Hotmail accounts: sexlove69.top / mytracking.pl / datebrand.com / mycutegirlfriends.com

https://sexlove69.top/fu24c >>> https://mytracking.pl/p/7xRX/NGxC/7VAo?ml_sub1=sokal >>> https://datebrand.com/dclick?campaign_id=mcg_ath1&s2=x&s3=x&lb=1&oid=x >>> https://mycutegirlfriends.com/landing2?s1=mcg_ath1&s2=x&s3=373&s4=&s5=&lbcid=x-bd96-4ab8-bef3-x0&lb=1&oid=x ;; ANSWER SECTION: sexlove69.top. 299 IN A 104.27.188.150 sexlove69.top. 299 IN A 172.67.188.33 sexlove69.top. 299 IN A 104.27.189.150 ;; ANSWER SECTION: mytracking.pl. 131 IN A 104.27.158.32 mytracking.pl. 131 IN A 104.27.159.32 mytracking.pl. 131 IN A 172.67.216.93 ;; ANSWER SECTION: datebrand.com. 299 IN A 104.28.23.247 datebrand.com. 299 IN A… Читать далее Spamming from Hotmail accounts: sexlove69.top / mytracking.pl / datebrand.com / mycutegirlfriends.com

Spam Hosting

The following IP addresses host A records and websites of domains advertised in snowshoe spam. The domains offer luxury goods, apparently counterfeit. lcvmk.com has address 104.27.183.176 lcvmk.com has address 172.67.150.29 lcvmk.com has address 104.27.182.176 lvsrb.com has address 104.31.71.88 lvsrb.com has address 172.67.203.203 lvsrb.com has address 104.31.70.88 The formatting of the spams, their origin from IPs… Читать далее Spam Hosting

Spam Hosting

The following IP addresses host A records and websites of domains advertised in snowshoe spam. The domains offer luxury goods, apparently counterfeit. lcvmk.com. 299 IN A 104.21.96.7 lcvmk.com. 299 IN A 172.67.150.29 http://lvsrb.com. << Illegal product shutdown page! Was: lcvmk.com has address 104.27.183.176 lcvmk.com has address 172.67.150.29 lcvmk.com has address 104.27.182.176 lvsrb.com has address 104.31.71.88… Читать далее Spam Hosting

Spam Hosting

The following IP addresses host A records and websites of domains advertised in snowshoe spam. The domains offer luxury goods, apparently counterfeit. lcvmk.com has address 104.27.183.176 lcvmk.com has address 172.67.150.29 lcvmk.com has address 104.27.182.176 lvsrb.com has address 104.31.71.88 lvsrb.com has address 172.67.203.203 lvsrb.com has address 104.31.70.88 The formatting of the spams, their origin from IPs… Читать далее Spam Hosting