hXXp://secured-l0ginuserverifyssl.com/login/authorize/user/dashboard/login/ secured-l0ginuserverifyssl.com has address 130.61.203.19 l0gin-citizensauthreview.com has address 130.61.203.19 secured-l0ginuserverified.com has address 130.61.203.19 l0gin-securedauthverifiedssl.com has address 130.61.203.19 secured-l0ginverifyssl.com has address 130.61.203.19 secured-l0ginauthverifyinfo.com has address 130.61.203.19 l0gin-securedauthverified.com has address 130.61.203.19 l0gin-securedauthsslverify.com has address 130.61.203.19 secured-l0ginreviewuserssl.com has address 130.61.203.19
Рубрика: oracle.com
phishing server
$ host secure04c-chase-client3d.com secure04c-chase-client3d.com has address 129.146.73.203
phishing server
huhkumay777.com has address 132.226.117.106 secure08a-chase-explore7.com has address 132.226.117.106 adminrandi555.com has address 132.226.117.106
malware server
hXXp://130.61.253.157/Update.bat
phishing server
$ host citibank-secure-profiles.com citibank-secure-profiles.com has address 129.213.113.88 $ host citibank-secure-profile.com citibank-secure-profile.com has address 129.213.113.88
phishing server
confirmmycard.com has address 132.226.31.109 confirmlogonline.com has address 132.226.31.109 confirmidentitylive.com has address 132.226.31.109
phishing server
systemlogalert.com has address 129.146.198.110 systemlivealert.com has address 129.146.198.110 hXXps://systemlogalert.com/citizensbank/
phishing server
mysystemonlinealert.com has address 132.226.127.173 © Copyright 2020 Citizens Financial Group, Inc. All rights reserved. Citizens Bank is a brand name of Citizens Bank, N.A. (NMLS ID# 433960). mylogliveform.com has address 132.226.127.173 mylogform.com has address 132.226.127.173 mysystemlivealert.com has address 132.226.127.173
Spamvertised website
Received: from voluptatesogajh.static.206.123.90.157.clients.your-server.de (51.104.245.202) Date: Tue, 14 Sep 2021 20:1x:xx +0000 From: 💕MeetRussianLady💕 <news@your-server.de> Subject: 🔥[]🔥,Russiske piger søger ægte kærlighed http://blotto.biz/track/[] 146.56.169.102 https://www.incorport.com/J55PK4D/QZX6914/?sub1=7&sub2=[] 173.255.248.174 https://www.russianwomanlove.com/index.php/promote/click?aid=1484&oid=CP230172&qpid_offer_id=[]&qpid_subid=9343&source_tag=7&qpid_clickid=[] 52.40.246.237 https://www.charmdate.com/my/register_do.php 52.197.172.138
spam emitter @152.70.181.66
Received: from bravo-pass.com (152.70.181.66) Date: Mon, 13 Sep 2021 18:5x:xx +0100 From: Walmart <freetrial@NJQ.affpartners.com> Subject: 𝐖𝐚𝐥𝐦𝐚𝐫𝐭 𝐇𝐚𝐬 𝐀 𝐁𝐢𝐠 𝐒𝐮𝐫𝐩𝐫𝐢𝐬𝐞 𝐅𝐨𝐫 𝐘𝐨