Received: from mail.amazon.com (v118-27-13-54.k6mg.static.cnode.io [118.27.13.54]) From: «RAY-BAN» <notice@amazon.com> Date: 6 Sep 2020 10:0x:xx +0000 Subject: Be thankful, get a coupon. https://subscribe.k0769.com/SubscribeClick.aspx?[] => https://www.rbgxo.com/ subscribe.k0769.com. 300 IN A 172.67.219.253 subscribe.k0769.com. 300 IN A 104.24.118.18 subscribe.k0769.com. 300 IN A 104.24.119.18 www.rbgxo.com. 300 IN A 104.18.46.173 www.rbgxo.com. 300 IN A 172.67.181.119 www.rbgxo.com. 300 IN A 104.18.47.173

2020-09-17 Received: from long.carpain.today (unknown [179.61.129.141]) Date: Thu, 17 Sep 2020 05:1x:xx -0400 From: «Seeking Arrangement» <**SeekingArrangement**@carpain.today> Subject: Enjoy Dating on your terms URL: http://carpain.today/[] Server IP address is 172.67.222.109 => Location: http://besttproduct.com/clb/sap1 Server IP address is 104.27.152.106 Location: https://m.clickbooth.com/c/aff?lid=1401813&subid1=sap1&subid2=&subid3=&subid4=&subid5=&subid6= Server IP address is 54.161.123.190 ——————————————————— Received: from newark.massivellion.buzz (unknown [104.140.140.72]) Date: Tue, 8 Sep… Читать далее Spamvertised website

Spammer hosting located here: https://altafxcom.s3.eu-central-1.amazonaws.com/malta.html -> https://dabsavy.com/0/0/0/X/ —> https://soltesperanza.com/X —> https://racingventured.com/X —-> https://voldrips.com/click?trvid=X ——> https://thiswaytotheinternet.com/?a=X ——> https://hitthattarget.com/?a=X ——-> https://try.comeandtake5.com/ch/?o=X $ dig +short hitthattarget.com 104.28.8.8 104.28.9.8 172.67.128.114 Spam sample ================================= Received: from discoveryvip.com (unknown [5.188.108.162]) by X(Postfix) with ESMTP id X for <X>; Fri, 11 Sep 2020 X Precedence: Bulk To: X Reply-To: =?utf-8?Q?Spar?= <info@postfinance.ch> From:… Читать далее Spammer hosting @172.67.128.114

Received: from mono.magazineside.icu (unknown [92.38.163.176]) Date: Wed, 16 Sep 2020 07:1x:xx -0400 From: «BarXStop» <Info@magazineside.icu> Subject: Amazing Invention Takes Over Control of Any Barking Dog URL: http://magazineside.icu/[] Server IP address is 104.18.56.140 => Location: https://hypertechx.com/ps/barxstop/index.php?net=9573&aff=5297&sid=16sepBSAm&cid=[] Server IP address is 104.31.68.126

Received: from long.carpain.today (unknown [179.61.129.141]) Date: Thu, 17 Sep 2020 05:1x:xx -0400 From: «Seeking Arrangement» <**SeekingArrangement**@carpain.today> Subject: Enjoy Dating on your terms URL: http://carpain.today/[] Server IP address is 172.67.222.109 => Location: http://besttproduct.com/clb/sap1 Server IP address is 104.27.152.106 Location: https://m.clickbooth.com/c/aff?lid=1401813&subid1=sap1&subid2=&subid3=&subid4=&subid5=&subid6= Server IP address is 54.161.123.190

Received: from nix.byeinsect.buzz (unknown [172.86.74.181]) Date: Sat, 19 Sep 2020 06:4x:xx -0400 From: «WiFi repeater» <UltraboostWiFi@byeinsect.buzz> Subject: No more buffering! WiFiBoost speeds up your internet URL: http://byeinsect.buzz/[] Server IP address is 181.215.89.119 => Location: http://hotsellingitem.com/wtp/ib Server IP address is 104.18.41.250 => Location: https://mrgadgetpro.com/?widipub_id=5df8e39fef28644d2d669363&wtrd_offer_id=5c3e0d03ef286449385d6652&wtrd_offer_pids[]=5dd6752aef28646a40427d62 Server IP address is 68.183.240.26

The domain fireplacecoffee.com houses a redirector for gift card fraud spams that are making the rounds in SMS. We have verified that the content is as expected and that the payload remains up and available at the time of making these six SBL listings. $ host www.fireplacecoffee.com www.fireplacecoffee.com has address 104.28.9.234 www.fireplacecoffee.com has address 172.67.155.42… Читать далее Gift card fraud spam — fireplacecoffee.com

The domain fireplacecoffee.com houses a redirector for gift card fraud spams that are making the rounds in SMS. We have verified that the content is as expected and that the payload remains up and available at the time of making these six SBL listings. $ host www.fireplacecoffee.com www.fireplacecoffee.com has address 104.28.9.234 www.fireplacecoffee.com has address 172.67.155.42… Читать далее Gift card fraud spam — fireplacecoffee.com

The domain fireplacecoffee.com houses a redirector for gift card fraud spams that are making the rounds in SMS. We have verified that the content is as expected and that the payload remains up and available at the time of making these six SBL listings. $ host www.fireplacecoffee.com www.fireplacecoffee.com has address 104.28.9.234 www.fireplacecoffee.com has address 172.67.155.42… Читать далее Gift card fraud spam — fireplacecoffee.com

The domain fireplacecoffee.com houses a redirector for gift card fraud spams that are making the rounds in SMS. We have verified that the content is as expected and that the payload remains up and available at the time of making these six SBL listings. $ host www.fireplacecoffee.com www.fireplacecoffee.com has address 104.28.9.234 www.fireplacecoffee.com has address 172.67.155.42… Читать далее Gift card fraud spam — fireplacecoffee.com