mylivedeals.com. 1200 IN A 198.54.119.115 mylivedeals.com. 172799 IN NS dns1.namecheaphosting.com. mylivedeals.com. 172799 IN NS dns2.namecheaphosting.com. dns1.namecheaphosting.com. 172799 IN A 156.154.132.200 dns2.namecheaphosting.com. 172799 IN A 156.154.133.200 Received: from NAM10-DM6-obe.outbound.protection.outlook.com (40.92.41.91) From: «Kim Foss» <nguyengcore1869@hotmail.com> Subject: Takk for at du la igjen en kommentar på innlegget mitt Date: Thu, 11 Nov 2021 19:41:40 +0100 Return-Path: nguyengcore1869@hotmail.com McAfee… Читать далее Spamvertised website
Рубрика: namecheap.com
Phishing payload against LHV (Estonian banking group)
$ host eelhv.com eelhv.com has address 192.64.118.16 This IP hosts a live phishing payload against LHV.
CEO fraud MX @192.64.119.59
The following domain name is used to conduct CEO fraud: $ dig +short finma-recovery.com MX 10 mx2.privateemail.com. 10 mx1.privateemail.com.
spam support (domains)
domain used in spam operation (chronic issue) r5he5r6h.xyz|162.255.119.85
spam support (domains)
Domain used in spam operation esdrgvdsfg.xyz… 162.255.119.175
phishing sites
mail-updatroyalcheck.shop has address 66.29.146.44
phishing sites
usainternalrevenueservice.com has address 162.213.251.20 Internal Revenue Service | An official website of the United States government
spam support (domains)
domain used in spam operation t567j67tj.xyz|192.64.119.14|
Phishing payload against LHV (Estonian banking group)
$ host pank-lhve.com pank-lhve.com has address 68.65.120.207
phishing server
mobilewfcheck.sbs has address 199.192.19.174 helpcustomerlogin.work has address 199.192.19.174 onlineinfoconnectsupport.sbs has address 199.192.19.174 check-mobile-info.cards has address 199.192.19.174 check-info.cards has address 199.192.19.174