Рубрика: cloudflare.com

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Loki botnet controller located at 172.67.214.33 on port 80 (using HTTP POST): hXXp://250b48d798957fbf33b77ae8a74a45ca.cf/Ausin4/fre.php $ dig +short 250b48d798957fbf33b77ae8a74a45ca.cf 172.67.214.33 Referencing malware binaries (MD5 hash): 718d54f60e56cf100e9ebd53a93b8f5d — AV detection:… Читать далее Loki botnet controller @172.67.214.33

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Loki botnet controller located at 188.114.97.15 on port 80 (using HTTP POST): hXXp://75bccc18b4d1631c2ecda542c872db27.cf/Ausin2/fre.php $ dig +short 75bccc18b4d1631c2ecda542c872db27.cf 188.114.97.15 Referencing malware binaries (MD5 hash): 0049f8aff0372cd5b7066ae4622a0f9b — AV detection:… Читать далее Loki botnet controller @188.114.97.15

Cloudflare hosts the A record and website of the domain purevpn.com. The owners of this domain are spamming through a bulk email service, @Mail250. Received: from hcp554.top (hcp554.top [176.123.1.160]) Date: Sun, 27 Feb 2022 11:##:## +0530 From: The VPN Group <david@hcp554.top> Reply-To: david@nomorecoldemails.com Subject: Want to stop cold emails? <snip> You’ve never heard of me… Читать далее spam Hosting/Landing Page (www.purevpn.com)

Cloudflare hosts the A record and website of the domain purevpn.com. The owners of this domain are spamming through a bulk email service, @Mail250. Received: from hcp554.top (hcp554.top [176.123.1.160]) Date: Sun, 27 Feb 2022 11:##:## +0530 From: The VPN Group <david@hcp554.top> Reply-To: david@nomorecoldemails.com Subject: Want to stop cold emails? <snip> You’ve never heard of me… Читать далее spam Hosting/Landing Page (www.purevpn.com)

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Loki botnet controller located at 172.67.180.126 on port 80 (using HTTP POST): hXXp://brokenskulltechnologies.tk/BN1/fre.php $ dig +short brokenskulltechnologies.tk 172.67.180.126 Referencing malware binaries (MD5 hash): 33e915c5057bbb6481b2d492d1bde0ed — AV detection:… Читать далее Loki botnet controller @172.67.180.126

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Loki botnet controller located at 188.114.97.15 on port 80 (using HTTP POST): hXXp://afripot.buzz/oluwa/five/fre.php $ dig +short afripot.buzz 188.114.97.15 Referencing malware binaries (MD5 hash): 00d56ddd073fc4e20d90087fd63a4dfc — AV detection:… Читать далее Loki botnet controller @188.114.97.15

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Loki botnet controller located at 172.67.129.38 on port 80 (using HTTP POST): hXXp://75bccc18b4d1631c2ecda542c872db27.ga/Ausin2/fre.php $ dig +short 75bccc18b4d1631c2ecda542c872db27.ga 172.67.129.38 Other malicious domain names hosted on this IP address:… Читать далее Loki botnet controller @172.67.129.38

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Loki botnet controller located at 172.67.180.126 on port 80 (using HTTP POST): hXXp://brokenskulltechnologies.tk/BN1/fre.php $ dig +short brokenskulltechnologies.tk 172.67.180.126 Referencing malware binaries (MD5 hash): 33e915c5057bbb6481b2d492d1bde0ed — AV detection:… Читать далее Loki botnet controller @172.67.180.126

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Loki botnet controller located at 188.114.97.15 on port 80 (using HTTP POST): hXXp://dieselloil.buzz/bobby/five/fre.php $ dig +short dieselloil.buzz 188.114.97.15 Referencing malware binaries (MD5 hash): 00d56ddd073fc4e20d90087fd63a4dfc — AV detection:… Читать далее Loki botnet controller @188.114.97.15

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Loki botnet controller located at 188.114.96.15 on port 80 (using HTTP POST): hXXp://afripot.buzz/oluwa/five/fre.php $ dig +short afripot.buzz 188.114.96.15 Referencing malware binaries (MD5 hash): 01dfa2db4bfb87e5a5d2d4e5d8c00f5f — AV detection:… Читать далее Loki botnet controller @188.114.96.15