Received: from echo.musictoday.icu (unknown [198.55.102.227]) Date: Thu, 7 May 2020 19:5x:xx -0400 From: «TV Caster» <Support@musictoday.icu> Subject: HDMI Miracast Airplay Wireless Dongle Stick for Smartphones and All Smart-TV URL redirects: URL: http://musictoday.icu/[] Server IP address is 104.18.51.28 => Location: https://track.h8m8.com/aff_c?offer_id=4550&aff_id=3013&url_id=[]&aff_sub=[]&aff_sub2=[]&aff_sub3=[] Server IP address is 184.72.2.57 Location: https://www.feedtoday.net/products/tvcast/advertorial?disclaimer=ADVERTORIAL&cop_id=[]&aff_id=3013&txid=[]&offer_id=4550&show_timer={timer}&linkout={linkout}&aff_sub=5297-C2&aff_sub2=KRmaY7&aff_sub3=[]&aff_sub4=&aff_sub5=&aff_click_id=&reviews_off={reviews_off}&recentlybought={recentlybought} Server IP address is 104.24.125.67

Received: from 058c6ba4.booost.live (unknown [173.44.148.84]) Date: Fri, 8 May 2020 09:5x:xx -0700 From: «5G Male» <5GMale@booost.live> Subject: This guy reveals how to get a “rock hard” boner in less than two weeks… http://www.booost.live/l/[] http://tps.buzz/gt/5gmt/ https://safetrkpro3.com/?E=yv8kp7qenu2isknrIAkIow%3d%3d&s1=5GMTP www.booost.live. 300 IN A 104.31.76.27 tps.buzz. 300 IN A 104.24.124.187 safetrkpro3.com. 600 IN A 54.214.127.236

Received: from 058c6ba0.soapgrow.guru (unknown [173.44.148.81]) Date: Fri, 8 May 2020 07:3x:xx -0700 From: «Aspen Green» <AspenGreen@soapgrow.guru> Subject: Reach For The Peak Of Purity URL redirects: http://www.soapgrow.guru/[] https://tps.buzz/ro/agt/ https://bit.ly/3dsTqMM https://track.revoffers.com/aff_c?offer_id=87&aff_id=5170&aff_sub=AGTP https://www.aspengreen.com/?utm_source=RevOffers&affiliate_id=5170&transaction_id=102ffa0bcb7e25769f018e932979a8 www.soapgrow.guru. 300 IN A 104.24.106.75 tps.buzz. 36 IN A 104.24.124.187 track.revoffers.com. 120 IN CNAME hempoffers-elb.go2cloud.org. hempoffers-elb.go2cloud.org. 60 IN A 63.33.92.231 hempoffers-elb.go2cloud.org. 60 IN A 52.214.56.92… Читать далее Spamvertised website

Received: from 058c6bb9.soniclife.guru (unknown [50.3.104.43]) Date: Tue, 12 May 2020 02:1x:xx -0700 From: «Military Fighter Jets» <MilitaryFighterJets@soniclife.guru> Subject: The «Next-Generation» Flight Simulator URL redirects: http://www.soniclife.guru/[] www.soniclife.guru. 300 IN A 104.27.149.101 www.soniclife.guru. 300 IN A 104.27.148.101 http://blogassistance.com/c2s/pf/ blogassistance.com. 300 IN A 104.31.85.183 blogassistance.com. 300 IN A 104.31.84.183 https://bit.ly/2mKZ9Fq http://hopup.netpro.c2strack.com/ hopup.netpro.c2strack.com. 300 IN A 193.56.28.153 http://hopup.netpro.click2sell.eu/ http://www.click2sell.eu/marketplace… Читать далее Spamvertised website

Received: from 058c6bb9.soniclife.guru (unknown [50.3.104.43]) Date: Tue, 12 May 2020 02:1x:xx -0700 From: «Military Fighter Jets» <MilitaryFighterJets@soniclife.guru> Subject: The «Next-Generation» Flight Simulator URL redirects: http://www.soniclife.guru/[] www.soniclife.guru. 300 IN A 104.27.149.101 www.soniclife.guru. 300 IN A 104.27.148.101 http://blogassistance.com/c2s/pf/ blogassistance.com. 300 IN A 104.31.85.183 blogassistance.com. 300 IN A 104.31.84.183 https://bit.ly/2mKZ9Fq http://hopup.netpro.c2strack.com/ hopup.netpro.c2strack.com. 300 IN A 193.56.28.153 http://hopup.netpro.click2sell.eu/ http://www.click2sell.eu/marketplace… Читать далее Spamvertised website

Received: from tampa.corocell.guru (unknown [50.2.212.74]) Date: Wed, 13 May 2020 04:5x:xx -0400 From: «VAHomeSavings» <VAReliefProgram@corocell.guru> Subject: VA housing benefits are going unclaimed in {{contact.state}} URL redirects: URL: http://corocell.guru/[] Server IP address is 107.158.163.223 Location: http://specialsoffers.co/adv/vassp1 Server IP address is 104.28.18.246 Location: https://www.bests.guru/73MDC78/NDP81F4/?sub1=vssp1 Server IP address is 104.28.14.87

Received: from rico.profits.guru (unknown [170.130.18.12]) Date: Sun, 17 May 2020 09:4x:xx -0400 From: «The Lost Book Of Remedies» <**TheLostBookOfRemedies**@profits.guru> Subject: All the Medicinal Plants of North America URL redirects: URL: http://profits.guru/[] Server IP address is 107.158.163.216 Location: http://amzings.best/cb/tlbrp2 Server IP address is 104.24.99.5 https://d665egkkltjn2l282engpmnl1s.hop.clickbank.net/?tid=TLBORP2 Server IP address is 35.164.158.80

The host at this IP address (104.27.129.192) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: http://simpl.pw/unknown/launcher/UnknownLauncher.exe AS number: AS13335 AS name: CLOUDFLARENET

Received: from 058c6c73.mythmiracle.icu (unknown [23.231.40.75]) Date: Thu, 28 May 2020 08:5x:xx -0700 From: «Man Breast Solution» <ManBreastSolution@mythmiracle.icu> Subject: Get your TRIAL today! URL redirects: http://www.mythmiracle.icu/[] => https://malecourse.buzz/cb/mbst/ => http://ofrhub.criticalb.hop.clickbank.net/?w=151 www.mythmiracle.icu. 300 IN A 104.28.7.150 www.mythmiracle.icu. 300 IN A 104.28.6.150 www.mythmiracle.icu. 300 IN A 172.67.188.28 malecourse.buzz. 300 IN A 172.67.159.101 malecourse.buzz. 300 IN A 104.27.145.247 malecourse.buzz.… Читать далее Spamvertised website

Received: from 058c6c73.mythmiracle.icu (unknown [23.231.40.75]) Date: Thu, 28 May 2020 08:5x:xx -0700 From: «Man Breast Solution» <ManBreastSolution@mythmiracle.icu> Subject: Get your TRIAL today! URL redirects: http://www.mythmiracle.icu/[] => https://malecourse.buzz/cb/mbst/ => http://ofrhub.criticalb.hop.clickbank.net/?w=151 www.mythmiracle.icu. 300 IN A 104.28.7.150 www.mythmiracle.icu. 300 IN A 104.28.6.150 www.mythmiracle.icu. 300 IN A 172.67.188.28 malecourse.buzz. 300 IN A 172.67.159.101 malecourse.buzz. 300 IN A 104.27.145.247 malecourse.buzz.… Читать далее Spamvertised website