Рубрика: cloudflare.com

Spammer hosting located here: https://clt1324614.bmetrack.com/c/l?u=X -> http://arenabab.space/app/wrap/X —> https://www.lightutil.com/6NP2CC7/QTXT8SN/?creative_id=X —> https://www.storiespedia.com/nachrichten-sys/?sub1=X —-> https://www.vbpol29.com/QFXQ25Q/5WGFT4/?sub1=X ——> https://ss852cctrkflw.com/transaction/click/X ——> https://btclangsapp.com/index.php?id=X $ dig +short ss852cctrkflw.com 104.21.81.220 172.67.191.100 Spam sample ================================== Received: from vulkanpartner.com (static.169.65.47.78.clients.your-server.de [78.47.65.169]) by X (Postfix) with ESMTP id X for <X>; Sat, 10 Apr 2021 X To: X Received: by 2002:a05:6520:458c:b029:ef:27d6:f980 with SMTP id X; Sat,… Читать далее Spammer hosting @104.21.81.220

Spammer hosting located here: https://clt1324614.bmetrack.com/c/l?u=X -> http://arenabab.space/app/wrap/X —> https://www.lightutil.com/6NP2CC7/QTXT8SN/?creative_id=X —> https://www.storiespedia.com/nachrichten-sys/?sub1=X —-> https://www.vbpol29.com/QFXQ25Q/5WGFT4/?sub1=X ——> https://ss852cctrkflw.com/transaction/click/X ——> https://btclangsapp.com/index.php?id=X $ dig +short btclangsapp.com 104.21.76.53 172.67.188.174 Spam sample ================================== Received: from vulkanpartner.com (static.169.65.47.78.clients.your-server.de [78.47.65.169]) by X (Postfix) with ESMTP id X for <X>; Sat, 10 Apr 2021 X To: X Received: by 2002:a05:6520:458c:b029:ef:27d6:f980 with SMTP id X; Sat,… Читать далее Spammer hosting @104.21.76.53

Toolzshop.biz — Buy Spam tools © 2012-2021 toolzshop.biz. 299 IN A 172.67.176.124 toolzshop.biz. 299 IN A 104.21.31.117 ________________________________________________________________________________ Was (2017): spamshop.su [79.142.75.223] toolshop.cc [79.142.75.223] ccb0x.ru [79.142.75.223] dumpsshop.ru [79.142.75.223] validdumps.ru [79.142.75.223] validstuff.su [79.142.75.223] toolzshop.biz [159.148.186.6] sellcvv.org [23.236.62.147] [81.171.8.6] buybest.org ns1.paysafehost.com ns2.paysafehost.com ns1.ultravicio.com ns2.ultravicio.com vault-market.ru vault-market.su vaultmarket.bz vaultmarket.link vaultmarket.lol vaultmarket.nl vaultmarket.online vmarket.biz try2check.su [111.90.138.242] ________ Was: [158.255.3.148]… Читать далее Spamming & carding fraud site/forum: Toolzshop.biz

Return-Path: []@mail.divulogy.today> Received: from dat.divulogy.today ([91.151.89.140]) by [] (8.14.7/8.14.7) with ESMTP id [] for []; Tue, 13 Apr 2021 07:[]:[] -0400 Authentication-Results: [] DKIM-Signature: [] DomainKey-Signature: [] Mime-Version: 1.0 Content-Type: multipart/alternative; boundary=»[]» Date: Tue, 13 Apr 2021 06:[]:[] -0500 From: «Eat First Thing» <morningdetox@divulogy.today> Reply-To: «Eat First Thing» <morningdetox@divulogy.today> Subject: Breakfast trick drops 127lbs and… Читать далее Spammer hosting

just-kill.cc. 299 IN A 104.21.17.116 just-kill.cc. 299 IN A 172.67.175.200 ________________________ Was: JUST-KILL.CC. 299 IN A 37.1.205.96 JUST-KILL.CC. 299 IN MX 10 mx.yandex.net. JUST-KILL.CC. 21599 IN NS carol.ns.cloudflare.com. JUST-KILL.CC. 21599 IN NS rob.ns.cloudflare.com. http:/just-kill.cc DL# SSN# BG — 100% automated. FLOOD — SMS — CALL — EMAIL. REAL SIM NUMBERS! JUST-KILL.CC » Email flood —… Читать далее Selling access to carder tools to cybercriminals: just-kill.cc

Return-Path: []@mail.netstary.digital> Received: from colo.netstary.digital ([91.151.89.155]) by [] (8.14.7/8.14.7) with ESMTP id [] for []; Wed, 14 Apr 2021 11:[]:[] -0400 Authentication-Results: [] DKIM-Signature: [] DomainKey-Signature: [] Mime-Version: 1.0 Content-Type: multipart/alternative; boundary=»[]» Date: Wed, 14 Apr 2021 10:[]:[] -0500 From: «Your Blood Sugar» <remedies@netstary.digital> Reply-To: «Your Blood Sugar» <remedies@netstary.digital> Subject: Green Veggie INFLAMES Diabetes Type… Читать далее Spamvertised domain hosting

Return-Path: []@mail.skylineof.today> Received: from able.skylineof.today ([91.151.89.165]) by [] (8.14.7/8.14.7) with ESMTP id [] for []; Wed, 14 Apr 2021 15:[]:[] -0400 Authentication-Results: [] DKIM-Signature: [] DomainKey-Signature: [] Mime-Version: 1.0 Content-Type: multipart/alternative; boundary=»[]» Date: Wed, 14 Apr 2021 14:[]:[] -0500 From: «Regain Your Hearing» <hearingloss@skylineof.today> Reply-To: «Regain Your Hearing» <hearingloss@skylineof.today> Subject: Scan uncovers real cause of… Читать далее Spammer hosting

https://mails.minanota.com/mta4/link.php?M=xx&N=xx&L=xx&F=xx (hacked site!) 302 Redirect >>> http://bit.ly/2YCtRBW 301 Redirect >>> https://www.socialblade.us/ ;; ANSWER SECTION: www.socialblade.us. 299 IN A 104.21.68.199 www.socialblade.us. 299 IN A 172.67.198.43 _____________________ Was: ;; ANSWER SECTION: www.socialblade.us. 299 IN A 172.67.189.203 www.socialblade.us. 299 IN A 104.18.47.145 www.socialblade.us. 299 IN A 104.18.46.145 1045 N Hancock St #75 Philadelphia Pennsylvania E: support@socialblade.us Related: cosmicmc.us… Читать далее Spamming socialblade.us (via evanscraig.com / mails.minanota.com)

Return-Path: []@mail.quelleotr.digital> Received: from worth.quelleotr.digital ([91.151.89.194]) by [] (8.14.7/8.14.7) with ESMTP id [] for []; Fri, 16 Apr 2021 10:[]:[] -0400 Authentication-Results: [] DKIM-Signature: [] DomainKey-Signature: [] Mime-Version: 1.0 Content-Type: multipart/alternative; boundary=»[]» Date: Fri, 16 Apr 2021 09:[]:[] -0500 From: «TedsSheds» <tedswoodwork@quelleotr.digital> Reply-To: «TedsWoodWork» <tedswoodwork@quelleotr.digital> Subject: Bad News To: [] Message-ID: <[]@quelleotr.digital> Content-Type: text/plain; Content-Transfer-Encoding:… Читать далее Spamvertised domain hosting

Received: from drama.tigerman.best (45.254.35.12 [45.254.35.12]) Date: Wed, 21 Apr 2021 12:0x:xx +0000 Subject: Surf mee op de bitcoin-golf en verdien een gegarandeerde From: Bitcoin Nieuws <drama@tigerman.best> https://drive.timeforu.info/index.php/campaigns/[] => https://yellowow.co/sup003 => https://www.vbpol29.com/[]/?uid=83 => https://ss852cctrkflw.com/transaction/click/[]?id=[]&offer_id=1&affiliate_id=18784&t=3&offer_name=Bitcoin+System[] => https://btsystemos.com/index.php?lang=[]&id=[]&offer_id=1&affiliate_id=18784&t=3&offer_name=Bitcoin+System[] => https://ssfxtrade.com/autologin/[] => https://www.obrinvest.com/redirects/trade/?lang=en drive.timeforu.info. 300 IN A 104.21.17.142 drive.timeforu.info. 300 IN A 172.67.176.212 yellowow.co. 300 IN A 104.21.2.27 yellowow.co.… Читать далее Spamvertised website