phishing server

147.182.227.34|citizens04.com|2021-10-04 15:16:44 147.182.227.34|secure06i.com|2021-09-27 13:31:23

WSHRAT botnet controller @147.182.232.67

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 147.182.232.67 on port 7121 TCP: $ telnet 147.182.232.67 7121 Trying 147.182.232.67… Connected to 147.182.232.67. Escape character… Читать далее WSHRAT botnet controller @147.182.232.67

spam emitter @67.205.141.191

Received: from sharmacalgary.com (67.205.141.191) From: MenOnly <info@sharmacalgary.com> Subject: Få en større penis som kan spre alle kvinners lår Date: Fri, 01 Oct 2021 11:3x:xx +0000

phishing server

hXXps://secure-navyfederal.com/ secure-navyfederal.com has address 134.209.162.24

phishing server

secure03login.com has address 64.227.111.199 hXXp://secure03login.com/Service/

phishing server

email12-secureserver.com has address 159.89.166.115 accounts-settings-secure-inc.ml has address 159.89.166.115 myaccounts-settings-secure-store.ml has address 159.89.166.115 myaccount-settings-secure-llc.ml has address 159.89.166.115 account-settings-secure-inc.ml has address 159.89.166.115 hXXp://myaccounts-settings-secure-store.ml/2250c8d8-a9fc-45b4-89b5-0fb97cfce914/

Junk mail.

This server is operating under the delusion that it is «bizcloud-power.yni.ac.jp» It is not, despite delusions otherwise: 220 ynu.ac.jp ESMTP Postfix 250-ynu.ac.jp Just one of 10000 or more… Received: from [143.198.137.97] ([143.198.137.97]) From: x Survey <webmaster@x<mailto:webmaster@x>> To: x<mailto:x> Subject: Survey Message Date: 25 Jul 2021 x +0200

Malware distribution from 46.101.135.220

Package delivery fraud spam. Payload redirects to Google on desktop and anything that geolocates wrong, actual Android malware otherwise. Received: from Hostpoint.ch (unknown [46.101.135.220]) by x (Postfix) with ESMTP id x for <x>; Wed, 4 Aug 2021 ##:##:## +0200 (CEST) Precedence: Bulk To: x Subject: Din leveransadress är fel !!!!!! Reply-To: Postnord <admin900@Hostpoint.ch> From: Postnord… Читать далее Malware distribution from 46.101.135.220

email phishing.

Received: from mta0.groupeageco.ca (unknown [138.197.166.38]) From: OneDrive <ageco@groupeageco.ca> Subject: One New Message(x). To: x Date: Tue, 10 Aug 2021 x +0000 Total Pages: 1 Receive Time: 7:29:11 AM Transmit Time: 0.014 sec Document Name: HSBC_Payment_slip_for Outstanding 001005.pdf background-image: url(«file:///C:/Program%20Files/SuperMailer/mic.png»); form method=»post» action=»https://webbusinessindia.com/new-po.php»