Рубрика: oracle.com

secure01a-chase-secure-portal-recovery-home.com has address 129.158.40.156 secure01b-chase-secure-portal-recovery-home.com has address 129.158.40.156

secure01a-chase-protect-private-webs.com has address 129.213.117.241 secure01c-chase-protect-private-webs.com has address 129.213.117.241

Not sure how they got the email address here but this is just spam. Received: from mail02.enterprise.spectrum.com ([142.0.163.64]) From: «Spectrum Enterprise» <info@mktg.enterprise.spectrum.com> Date: 21 Oct 2021 13:XX:XX -0400 Subject: Work is changing in NYC. Get 6 months on us to adapt Limited time offer; subject to change. Get first 6 months free for qualifying services… Читать далее spamming spamtraps

ųsps-redelivery.com has address 150.136.233.137 chąse.com has address 150.136.233.137 cɧase.com has address 150.136.233.137 cʜase.com has address 150.136.233.137 ɴetflix.com has address 150.136.233.137 ŋfcu.com has address 150.136.233.137 ɴfcu.com has address 150.136.233.137

navyfederalusa.com has address 129.213.41.153 ƞavyfederạl.com has address 129.213.41.153

Return-Path: <qololujy@tfindia.com> Received: from tfindia.com ([130.61.152.28]) by [] (8.14.7/8.14.7) with ESMTP id [] for []; Fri, 5 Mar 2021 12:[]:[] -0500 Date: Sat, 6 Mar 2021 1:[]:[] +0800 From: [] <[]@tfindia.com> Message-ID: <[]@tfindia.com> To: [] Subject: Want to extend your free trial [] — NetRange: 130.61.0.0 — 130.61.255.255 CIDR: 130.61.0.0/16 NetName: OC-195 NetHandle: NET-130-61-0-0-1 Parent:… Читать далее Phishing source

Having been kicked off AWS twice, they have moved here: Resolving sahlik.dns.army (sahlik.dns.army)… 150.136.20.161 Connecting to sahlik.dns.army (sahlik.dns.army)|150.136.20.161|:80… connected. HTTP request sent, awaiting response… 200 OK Length: 37 [text/html] Saving to: ‘trans.php.1’

Based on research, analysis of network data, our ‘snowshoe’ spam detection systems, intelligence sources and our experience, Spamhaus believes that this IP address range is being used or is about to be used for the purpose of high volume ‘snowshoe’ spam emission. As a precaution therefore we are listing this IP range in an SBL… Читать далее Suspected Snowshoe Spam IP Range

Received: from omz.shoppingexclusiv.de (unknown [129.159.126.57]) by xx; Sat, 3 Apr 2021 13:22:21 -0400 (EDT) Received: from mmt.radishbo-ya.co.jp (HELO read.izhzonetime.net) () by mx01.lytzenitmail.dk with ESMTP; 22 Mar 2021 11:22:09 +0100 Subject:godaddy virus detected (6) From:Urgent xx Date: Sat, 03 Apr 2021 16:22:31 +0200 To: <yourmom1260@jubii.dk> Reply-To: «Sainsbury’s Bank Plc» <email.reply@sainsburysbank.co.uk> MIME-Version: 1.0 X-mailer: nlserver, Build 6.7.0… Читать далее Server/account sending fraud spam

This particular perpetrator never gives up, just changes his host. Resolving sahlik.dns.army (sahlik.dns.army)… 129.146.63.30 Connecting to sahlik.dns.army (sahlik.dns.army)|129.146.63.30|:80… connected. HTTP request sent, awaiting response… 200 OK