Received: from wilma.foodgrow.bid (unknown [170.130.18.5]) Date: Fri, 29 May 2020 09:3x:xx -0400 From: «Cured Gout» <CuredGout@foodgrow.bid> Subject: GOUT gone for good in three days URL redirects: http://foodgrow.bid/[] => http://kingsbooster.buzz/cb/gsp1/ => https://7ca5dgtkvemtayd8y3-2wgyj97.hop.clickbank.net/?tid=GSP1 foodgrow.bid. 221 IN A 172.67.193.27 foodgrow.bid. 221 IN A 104.18.39.133 foodgrow.bid. 221 IN A 104.18.38.133 kingsbooster.buzz. 300 IN A 104.27.141.39 kingsbooster.buzz. 300 IN A… Читать далее Spamvertised website

Update 2020-06-03 Received: from kale.soniketo.guru (unknown [170.130.18.7]) Date: Wed, 3 Jun 2020 04:4x:xx -0400 From: «**Pinecone Research**» <PineconeResearch@soniketo.guru> Subject: Pinecone Research — US URL redirects: http://soniketo.guru/[] => http://kingsbooster.buzz/mb/prsp1/ => https://www.mb104.com/lnk.asp?o=11716&c=918277&a=347051&k=2D870C6F327AE46E7B158CA195219387&l=11849&s1=PRSP1 => https://www.maxbounty.com/lnk.asp?o=11716&c=918277&a=347051&k=2D870C6F327AE46E7B158CA195219387&l=11849&s1=PRSP1 => https://trk.thinkaction.com/?a=50003850&c=37846&s1=347051&s2=177164041 => https://www.pineconeresearch.com/signup/ds794.aspx?psid=425470217&sid=p2 soniketo.guru. 300 IN A 172.67.181.141 soniketo.guru. 300 IN A 104.31.67.172 soniketo.guru. 300 IN A 104.31.66.172 kingsbooster.buzz. 300 IN A… Читать далее Spamvertised website

Received: from london.miraclelife.guru (unknown [170.130.18.23]) Date: Mon, 1 Jun 2020 05:1x:xx -0400 From: «Online beauty» <Onlinebeauty@miraclelife.guru> Subject: There are_Beautiful_girls_looking_Only_For_Fun URL redirects: http://miraclelife.guru/[] => https://kingsbooster.buzz/adv/dhrp1/ => https://www.bests.guru/2211HGDX/NJR4FQW/?sub1=dhrp1 => http://www.datehotrussian.com/index.php/promote/click?aid=1268&oid=CP230172&qpid_offer_id=DHR_234922TDDUE&qpid_subid=17886&source_tag=dhrp1&qpid_clickid=e2e61489640b41ba86155ec03b0dd7ef miraclelife.guru. 112 IN A 104.24.109.79 miraclelife.guru. 112 IN A 104.24.108.79 miraclelife.guru. 112 IN A 172.67.142.213 kingsbooster.buzz. 300 IN A 172.67.139.61 kingsbooster.buzz. 300 IN A 104.27.141.39 kingsbooster.buzz. 300… Читать далее Spamvertised website

Received: from a.madonnafix.com (a.madonnafix.com [104.148.87.162]) From: «Ray Ban» <dtyyomc@madonnafix.com> Subject: Cheap Ray Ban Sunglasses 80% Off Wholesale — Best Sellers Date: Mon, 15 Jun 2020 13:2x:xx +0800 https://www.lbyrb.com/ www.lbyrb.com. 300 IN A 104.27.157.37 www.lbyrb.com. 300 IN A 172.67.215.183 www.lbyrb.com. 300 IN A 104.27.156.37

2020-10-12 Received: from win-41pnvst8but.local (213.142.148.90 [213.142.148.90]) Reply-To: efkannturkk@gmail.com From: «e-ticaret+» <ozgurasrin@gmail.com> Subject: E-ihracat — Market Finder — Ticari İstihbarat Eğitimi Date: Sun, 11 Oct 2020 23:1x:xx +0300 https://www.igeme.com.tr/e-ihracat-market-finder-ticari-istihbarat/ www.igeme.com.tr. 300 IN A 104.28.9.34 www.igeme.com.tr. 300 IN A 104.28.8.34 www.igeme.com.tr. 300 IN A 172.67.130.26 igeme.com.tr. 43200 IN NS maisie.ns.cloudflare.com. igeme.com.tr. 43200 IN NS terry.ns.cloudflare.com. ————————————- helo:… Читать далее igeme.com.tr

SMS spammed bit.ly URL redirects to https://americansforprosperity.ivolunteers.com/[] — americansforprosperity.ivolunteers.com. 300 IN A 104.17.165.66 americansforprosperity.ivolunteers.com. 300 IN A 104.17.164.66 — NetRange: 104.16.0.0 — 104.31.255.255 CIDR: 104.16.0.0/12 NetName: CLOUDFLARENET NetHandle: NET-104-16-0-0-1 Parent: NET104 (NET-104-0-0-0-0) NetType: Direct Assignment OriginAS: AS13335 Organization: Cloudflare, Inc. (CLOUD14) RegDate: 2014-03-28 Updated: 2017-02-17 Comment: All Cloudflare abuse reporting can be done via https://www.cloudflare.com/abuse… Читать далее Spamvertised URL hosting

Spammer hosting located here: https://uyxsq.s3.amazonaws.com/X -> https://www.nusmall.com/X —> https://tracking.affid21221il.com/aff_c?offer_id=X —> http://de.thebitcoinscode.com/?TrackingID=X $ dig +short de.thebitcoinscode.com 172.67.192.94 104.28.30.134 104.28.31.134

Received: from win-hpo47vg23pt.local (2.56.63.8 [2.56.63.8]) From: İhracat Seferberliği <talepler2020@gmail.com> Subject: İhracat Seferberliği Başlıyor. İhracat Yapmak İstiyorsan Kaydını Tamamla Date: Mon, 27 Jul 2020 14:3x:xx +0300 https://www.igeme.com.tr/urunler/ihracat-talepleri-uyeligi/ www.igeme.com.tr. 300 IN A 104.28.9.34 www.igeme.com.tr. 300 IN A 104.28.8.34 www.igeme.com.tr. 300 IN A 172.67.130.26 igeme.com.tr. 43199 IN NS terry.ns.cloudflare.com. igeme.com.tr. 43199 IN NS maisie.ns.cloudflare.com.

Cloudflare hosts the A record and website of the domain gologocrowd.com. This domain belongs to RetroCubes, a ROKSO-listed spam operation, and is advertised in a current spam blast via a redirect chain. Received: from a27-193.smtp-out.us-west-2.amazonses.com (a27-193.smtp-out.us-west-2.amazonses.com [54.240.27.193]) Date: Sat, 1 Aug 2020 03:##:## +0000 From: Godaddy Offer <belinda@logodesignscoupon.email> Subject: Month End Sale: <x>, Custom Logo… Читать далее RetroCubes

Cloudflare hosts the A record and website of the domain gologocrowd.com. This domain belongs to RetroCubes, a ROKSO-listed spam operation, and is advertised in a current spam blast via a redirect chain. Received: from a27-193.smtp-out.us-west-2.amazonses.com (a27-193.smtp-out.us-west-2.amazonses.com [54.240.27.193]) Date: Sat, 1 Aug 2020 03:##:## +0000 From: Godaddy Offer <belinda@logodesignscoupon.email> Subject: Month End Sale: <x>, Custom Logo… Читать далее RetroCubes