Received: from cj6i463.merrell.pl (23.97.251.208) From: Male Enhancement – Granite <cupEU@cupEU.fi> Subject: ❤️ Are you the Man you Could Be? Try Granite!❤️ Date: Sat, 13 Nov 2021 23:4x:xx +0000 http://23.11.133.34.bc.googleusercontent.com/t?encv=2&v=[] 34.133.11.23 https://puysegura.com/?E=[]&s1=16&s2=38226 18.236.164.87 https://enadtaerg.com/?E=[]&s1=16&s2=38226&ckmguid=[] 13.52.80.238 https://insidernewstoday.net/male/en/med-journal/v2/granite/?AFID=428015&CID=430234&ADID=2359327&SID=4504&AffiliateReferenceID=[] 208.68.36.33
Spamvertised website
Received: from siremlincoln11.onmicrosoft.com (192.46.209.226) Date: Sun, 14 Nov 2021 00:4x:xx +0100 From: ғʟᴀʙʙʏ ᴀʀᴍs <[]@[].nauticaposto.com> Subject: 𝙅𝙖𝙥𝙖𝙣𝙚𝙨𝙚 “𝙘𝙖𝙧𝙗 𝙩𝙧𝙞𝙘𝙠” 𝙗𝙪𝙧𝙣𝙨 2 𝙡𝙗𝙨 𝙤𝙛 𝙗𝙚𝙡𝙡𝙮 𝙛𝙖𝙩 http://jtv0xy-tikyljjoufxm.memoriesfoor.site/cl/14617_md/[] 143.198.38.141 https://chebacheb.com/?E=[]&s1=374&s2=14617_2&s3=[] 54.219.169.71 https://drehpehsnamreg.com/?E=[]&s1=374&s2=14617_2&s3=[]&ckmguid=[] 54.153.15.35 https://www.ep20trk.com/C9JN8J/2CTPL/?uid=36&sub1=5301&sub2=[]&sub3=374 34.120.202.146 https://glucafix.us/vidgfx/index.php?aff_id=1151&subid2=[]&subid=227&subid3=5301 104.21.92.251
affiliate spam @puysegura.com
Received: from cj6i463.merrell.pl (23.97.251.208) From: Male Enhancement – Granite <cupEU@cupEU.fi> Subject: ❤️ Are you the Man you Could Be? Try Granite!❤️ Date: Sat, 13 Nov 2021 23:4x:xx +0000 http://23.11.133.34.bc.googleusercontent.com/t?encv=2&v=[] 34.133.11.23 https://puysegura.com/?E=[]&s1=16&s2=38226 18.236.164.87 https://enadtaerg.com/?E=[]&s1=16&s2=38226&ckmguid=[] 13.52.80.238 https://insidernewstoday.net/male/en/med-journal/v2/granite/?AFID=428015&CID=430234&ADID=2359327&SID=4504&AffiliateReferenceID=[] 208.68.36.33
affiliate spam @chebacheb.com
Received: from siremlincoln11.onmicrosoft.com (192.46.209.226) Date: Sun, 14 Nov 2021 00:4x:xx +0100 From: ғʟᴀʙʙʏ ᴀʀᴍs <[]@[].nauticaposto.com> Subject: 𝙅𝙖𝙥𝙖𝙣𝙚𝙨𝙚 “𝙘𝙖𝙧𝙗 𝙩𝙧𝙞𝙘𝙠” 𝙗𝙪𝙧𝙣𝙨 2 𝙡𝙗𝙨 𝙤𝙛 𝙗𝙚𝙡𝙡𝙮 𝙛𝙖𝙩 http://jtv0xy-tikyljjoufxm.memoriesfoor.site/cl/14617_md/[] 143.198.38.141 https://chebacheb.com/?E=[]&s1=374&s2=14617_2&s3=[] 54.219.169.71 https://drehpehsnamreg.com/?E=[]&s1=374&s2=14617_2&s3=[]&ckmguid=[] 54.153.15.35 https://www.ep20trk.com/C9JN8J/2CTPL/?uid=36&sub1=5301&sub2=[]&sub3=374 34.120.202.146 https://glucafix.us/vidgfx/index.php?aff_id=1151&subid2=[]&subid=227&subid3=5301 104.21.92.251
affiliate spam @enadtaerg.com
Received: from yyutremlincoln16.onmicrosoft.com (172.104.206.43) Date: Sat, 13 Nov 2021 22:5x:xx +0100 From: ᴍᴜᴀᴍᴀ ʀʏᴏᴋᴏ <[]@[].nauticaposto.com> Subject: 𝙂𝙚𝙩 𝙒𝙞𝙁𝙞, 𝙖𝙣𝙮𝙬𝙝𝙚𝙧𝙚, 𝙖𝙣𝙮𝙩𝙞𝙢𝙚! http://xs2zkb-mayfcexvusjf.memoriesfoor.site/cl/14597_md/[] 143.198.38.141 https://chebacheb.com/?E=[]&s1=374&s2=14597_2&s3=[] 54.219.169.71 https://enadtaerg.com/?E=[]&s1=374&s2=14597_2&s3=[]&[] 13.52.80.238 https://ryokorouter.com/articles/everyone-going-crazy/?l=en&c=usd&vndr=evf&evf=1&uid=326&offid=5&affiliate_id=16&shaff=0&subid=5301&subid2=[]6&subid3=374 104.21.66.252
Malware botnet controller @172.67.199.242
The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Malware botnet controller located at 172.67.199.242 on port 80 (using HTTP POST): hXXp://staticimg.ikahega.com/api/ $ dig +short staticimg.ikahega.com 172.67.199.242 Referencing malware binaries (MD5 hash): 0ccaba8f07f43baba600ee09864dd488 — AV detection:… Читать далее Malware botnet controller @172.67.199.242
Loki botnet controller @104.21.16.10
The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse. Loki botnet controller located at 104.21.16.10 on port 80 (using HTTP POST): hXXp://gridnetworks.xyz/five/fre.php $ dig +short gridnetworks.xyz 104.21.16.10
spam emitters
Received: from s11.megojom.ru (megojom.ru [109.71.11.236]) Date: Sat, 13 Nov 2021 16:3x:xx +0000 From: Aleksandr <info@s11.megojom.ru> Subject: Предложение 109.71.11.234 eseneno.ru 109.71.11.235 yeremont.ru 109.71.11.236 megojom.ru 109.71.11.237 uwentos.ru 109.71.11.238 dsergom.ru
affiliate spam @bemobtrcks.com
Received: from mout.kundenserver.de (217.72.192.73) From: Kemberly Merritt <aerobic@abseitz.de> Date: Sat, 13 Nov 2021 19:59:30 +0300 Subject: I want you, take me!! https://docs.google.com/presentation/d/1HvUaPUjLT3TYnrCpCXSNe5hp5QZE3jq8qeoEc7N60QI/preview https://bit.ly/3Hd5u4m 67.199.248.11 http://njes4.bemobtrcks.com/go/fa6d6d38-7082-49c0-b194-f74a8dad01ea 52.204.19.219 https://fastrendezvou.com/?utm_source=[]&utm_campaign=go2&s2=[] 172.67.172.48
spam support (domains)
domain used in spam operation laudypauty.com [142.44.224.10]