Рубрика: namecheap.com

https://accounts-becu.org/BECU/ $ host accounts-becu.org accounts-becu.org has address 68.65.120.182

$ host usmilservicecenter.com usmilservicecenter.com has address 198.187.29.31

domain used in spam operation 45gb456h.xyz|192.64.119.251

The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. OskiStealer botnet controller located at 192.64.114.103 on port 80 (using HTTP POST): hXXp://dellproductz.xyz/7.jpg $ dig +short dellproductz.xyz 192.64.114.103

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) From: «Failed_Dieters .Diet_Conspiracy» <physical.appearance.mistakes@gmail.com> Date: Sun, 4 Jul 2021 19:38:44 +0000 Subject: Grow P with 67% by eating this weird Chinese fruit! https://storage.googleapis.com/aisssiin/ai.html https://dachtech.net/aisienpower/ https://mwbliss.com/6777/326/2/? https://aizenpower.com/video.php?aff_id=54&subid2=[]&subid=326 https://www.buygoods.com/secure/?sessid2=[]&aff_id=54&sid=326&sid2=[]&account_id=6686&screen=checkout_one&product_codename=aip1&redirect=[]&item=1 Spamvertised domains registered through Namecheap.com, all utilised by the same spam operation: dachtech.net aizenpower.com thedentitox.com

Spamming & phishing tools and systems: ;; QUESTION SECTION: ;botmasterlabs.org. IN NS ;; ANSWER SECTION: botmasterlabs.org. 1799 IN NS freedns1.registrar-servers.com. 45.58.122.82 botmasterlabs.org. 1799 IN NS freedns2.registrar-servers.com. botmasterlabs.org. 1799 IN NS freedns3.registrar-servers.com. botmasterlabs.org. 1799 IN NS freedns4.registrar-servers.com. botmasterlabs.org. 1799 IN NS freedns5.registrar-servers.com. _____________ Was: botmasterlabs.org. 899 IN A 95.165.28.86 ;; QUESTION SECTION: ;botmasterlabs.org. IN NS ;;… Читать далее Hosting botmasterlabs.org / botmasterlabs.net spam/phish operation (DNS)

irs-governmentid.com has address 199.192.16.62 irs-governmentdata.com has address 199.192.16.62 hXXps://irs-governmentid.com/?login

domain used in spam operation we454gt54g.xyz|162.255.119.176