Рубрика: google.com

An Argentinean spam operation, NaturalSoftware (SoftwaredeFacturacion.com.ar), is abusing Youtube to host its URI after its host shut down its website for spamming. Google: Please suspend this spammer’s Youtube account. Received: from infovia.com.ar (unknown [181.47.216.205]) Date: Wed, 18 Jul 2018 15:##:## -0300 From: «Programas de Facturacion» <jazzyoutube@infovia.com.ar> Subject: Lista de Precios <snip> Hola! Ordena tu negocio… Читать далее Youtube Spam URI (NaturalSoftware) (SoftwaredeFacturacion.com.ar)

The host at this IP address is emitting spam mails. A spam sample can be found below. ==================================================================== Received: from server.paspasart.com (unknown [89.252.181.86]) by X (Postfix) with ESMTPS id X for <X>; Wed, 31 Oct 2018 XX:XX:XX +0000 (UTC) Received: from instance-template-8.europe-west2-c.c.vps1-156821.internal (14.142.230.35.bc.googleusercontent.com [35.230.142.14]) by server.paspasart.com (Postfix) with ESMTPSA id X Mon, 15 Oct 2018… Читать далее Spam source @35.230.142.14

The host at this IP address (209.85.222.194) is emitting bulk email to unconfirmed email addresses. The newsletter service associated with this IP address is not properly configured and hence being abused by spammers and malicious actors to «listbomb» innocent internet users. Problem description ============================ The newsletter service (Freya MARTIN <freya.martin@expolists.com>) is using the referenced IP… Читать далее Abused / misconfigured newsletter service (listbombing)

The host at this IP address is being (ab)used to «listbomb» email addresses: From: info@liberaliaediciones.com Subject: [Liberalia Ediciones] Por favor activa tu cuenta Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns. Problem… Читать далее Abused / misconfigured newsletter service (listbombing)

The host at this IP address is being (ab)used to «listbomb» email addresses: From: rubytaclothes@gmail.com Subject: [Rubyta Clothes] Información de tu usuario y contraseña Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns.… Читать далее Abused / misconfigured newsletter service (listbombing)

The host at this IP address is being (ab)used to «listbomb» email addresses: From: patrick@evolvecamps.com Subject: Re: [SPAM] New customer message on January 9, 2019 at 03:27 PM Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages… Читать далее Abused / misconfigured newsletter service (listbombing)

Spammer hosting located here: http://trisul.soundexpoaudio.com/ga/click/XXX -> http://pr.shopgoidep.com/hitsurveys/survey?uid=XXX —> http://mtp.identityproofs.com/hitsurveys/survey?uid=XXX —> https://c.eteppy.com/?a=XXX —-> https://www.gmmsafeads.com/XXX ——> https://onlinewin.club/XXX $ dig +short www.gmmsafeads.com 35.190.66.152 Spam sample ==================================================== Received: from a1.checknow.soundexpoaudio.com (unknown [96.45.70.78]) by X (Postfix) with ESMTPS id X for <X>; Wed, 23 Jan 2019 X DKIM-Signature: X Subject: =?UTF-8?Q?Gl=C3=BCckwunsch=21=20Starten=20Sie=20die=20Umfrage?= =?UTF-8?Q?=20jetzt=20und=20w=C3=A4hlen=20Sie=20Ihre=201=20Gewinne=21?= From: «Denner» <christina@soundexpoaudio.com> To: X Sender: christina@soundexpoaudio.com Reply-To:… Читать далее Spammer hosting @35.190.66.152

The host at this IP address is being (ab)used to «listbomb» email addresses: From: jeannine@dailyplanetltd.com Subject: It’s COLD outside…. Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns. Problem resolution ============================ In order… Читать далее Abused / misconfigured newsletter service (listbombing)

The host at this IP address is being (ab)used to «listbomb» email addresses: From: brad@dailyplanetltd.com Subject: February Shirts of the Month Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns. Problem resolution ============================… Читать далее Abused / misconfigured newsletter service (listbombing)

The host at this IP address is being (ab)used to «listbomb» email addresses: From: jeannine@dailyplanetltd.com Subject: March Shirt of the Month Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns. Problem resolution ============================… Читать далее Abused / misconfigured newsletter service (listbombing)