Рубрика: microsoft.com

$ host whatsapp.gbrubally-ts.gq whatsapp.gbrubally-ts.gq has address 40.88.10.149 hXXps://whatsapp.gbrubally-ts.gq/login.php

hXXps://instagramtelifbilgisi1.com/ hXXps://verifiyconfirmsupport3.com/ ig-verify-client.com instagram-client-help.com ighelp-center-support.com help-copyright.com fb-business-resources.com copyright-feedback-center.com verifiyconfirmsupport3.com verifiyconfirmsupport2.com lhelp-notice.com ig-verify-support.com copyrightformfeedback.com instagram-support-center.com lhelp-copyrightz.com verifiyconfirmsupport1.com verifiyconfirmsupport.com lhelp-copyrights.com verifiyconfirm1.com instagramtelifbilgisi1.com copyright-feedback-form.com eqweweqewqewq.com copyright-feedback-appeal.com instagrambilgitelif.com

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 20.63.35.138 on port 2156 TCP: $ telnet 20.63.35.138 2156 Trying 20.63.35.138… Connected to 20.63.35.138. Escape character… Читать далее Vjw0rm botnet controller @20.63.35.138

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 20.98.18.253 on port 2222 TCP: $ telnet 20.98.18.253 2222 Trying 20.98.18.253… Connected to 20.98.18.253. Escape character… Читать далее BitRAT botnet controller @20.98.18.253

hXXps://next-step-10000546898652313649852506.tk/confirmreg.htm $ host next-step-10000546898652313649852506.tk next-step-10000546898652313649852506.tk has address 20.97.57.216 next-step-10000546898652313649852508.tk next-step-10000546898652313649852506.tk next-step-10000546898652313649852503.tk next-step-10000546898652313649852502.tk fb-privacy-1000004248715562451282-tw.tk fb-privacy-1000004248715562451287-tw.tk next-step-10000546898652313649852501.tk next-step-10000546898652313649852509.tk next-step-10000546898652313649852505.tk next-step-10000546898652313649852507.tk next-step-10000546898652313649852504.tk next-step-10000546898652313649852510.tk rebulution-page-10000002547124566985623545808.tk fb-privacy-1000004248715562451290-tw.tk fb-privacy-1000004248715562451283-tw.tk fb-privacy-1000004248715562451289-tw.tk fb-privacy-1000004248715562451281-tw.tk fb-privacy-1000004248715562451285-tw.tk fb-privacy-1000004248715562451288-tw.tk fb-privacy-1000004248715562451286-tw.tk fb-privacy-1000004248715562451284-tw.tk reconfirm-infopage-10000233852478912687545910.tk reconfirm-infopage-10000233852478912687545912.tk reconfirm-infopage-10000233852478912687545906.tk reconfirm-infopage-10000233852478912687545907.tk reconfirm-infopage-10000233852478912687545909.tk reconfirm-infopage-10000233852478912687545901.tk reconfirm-infopage-10000233852478912687545905.tk reconfirm-infopage-10000233852478912687545913.tk revolution-admin-10000002003001234567891023456766.tk revolution-admin-10000002003001234567891023456761.tk revolution-admin-10000002003001234567891023456763.tk revolution-admin-10000002003001234567891023456764.tk revolution-admin-10000002003001234567891023456768.tk revolution-admin-10000002003001234567891023456769.tk revolution-admin-10000002003001234567891023456765.tk revolution-admin-10000002003001234567891023456767.tk revolution-admin-10000002003001234567891023456770.tk revolution-admin-10000002003001234567891023456762.tk revolution-admin-10000002003001234567891023456757.tk revolution-admin-10000002003001234567891023456760.tk reconfirm-infopage-1000024985621634879456982505.tk reconfirm-infopage-1000024985621634879456982509.tk reconfirm-infopage-1000024985621634879456982508.tk reconfirm-infopage-1000024985621634879456982510.tk reconfirm-infopage-1000024985621634879456982506.tk reconfirm-infopage-1000024985621634879456982507.tk… Читать далее phishing server

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 52.235.18.18 on port 30281 TCP: $ telnet 52.235.18.18 30281 Trying 52.235.18.18… Connected to 52.235.18.18. Escape character… Читать далее Vjw0rm botnet controller @52.235.18.18

hXXp://next-step-358794561254986254659901.tk/confirmreg.htm More domains added daily. fb-privacy-1000004248715562451296-tw.tk has address 13.72.208.145 fb-privacy-1000004248715562451300-tw.tk has address 13.72.208.145 fb-privacy-1000004248715562451294-tw.tk has address 13.72.208.145 fb-privacy-1000004248715562451297-tw.tk has address 13.72.208.145 next-step-358794561254986254659903.tk has address 13.72.208.145 next-step-358794561254986254659904.tk has address 13.72.208.145 next-step-358794561254986254659901.tk has address 13.72.208.145 next-step-358794561254986254659905.tk has address 13.72.208.145 fb-reconfirm-info-1000025374985621645804.tk has address 13.72.208.145 fb-reconfirm-info-1000025374985621645805.tk has address 13.72.208.145 fb-reconfirm-info-1000025374985621645806.tk has address 13.72.208.145 fb-reconfirm-info-1000025374985621645808.tk has address 13.72.208.145 fb-reconfirm-info-1000025374985621645807.tk has… Читать далее phishing server

Received: from freestorefoodbank.org (193.233.221.113) From: Ｆｉｎａｎｓ <[]> Subject: [], 𝐒𝐚𝐦𝐦𝐞𝐧𝐥𝐢𝐠𝐧 𝐩𝐫𝐢𝐬𝐞𝐫 𝐨𝐠 𝐯𝐢𝐥𝐤å𝐫 𝐩å 𝐥å𝐧 – 𝐡𝐞𝐥𝐭 𝐮𝐟𝐨𝐫𝐩𝐥𝐢𝐤𝐭𝐞𝐧𝐝𝐞. __________#1 Date: Tue, 06 Jul 2021 05:3x:xx -0400 (EDT) URL: http://node-103-252-46-165.ipptr.com/[] Server IP address is 103.252.46.165 => Location: https://oranswirl.com/?a=936&oc=12697&c=36351&m=3&s1=[]&s2=[]&s3=[]&s5=ckl3se Server IP address is 34.90.27.126 Location: https://bluelifet.com/?a=936&oc=12697&c=36351&m=3&s1=[]&s2=[]&s3=[]&s5=ckl3se&ckmguid=[] Server IP address is 34.90.165.178 Location: https://mrktormed.com/click.track?CID=[]&AFID=[]&AffiliateReferenceID=[]&SID=936 Server IP address is… Читать далее Spamvertised website

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 13.77.222.211 on port 7820 TCP: $ telnet 13.77.222.211 7820 Trying 13.77.222.211… Connected to 13.77.222.211. Escape character… Читать далее Vjw0rm botnet controller @13.77.222.211

The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 20.151.200.9 on port 6606 TCP: $ telnet 20.151.200.9 6606 Trying 20.151.200.9… Connected to 20.151.200.9. Escape character… Читать далее AsyncRAT botnet controller @20.151.200.9