Hosting dozens of sites with stolen credit card data: Stolen credit card data website example: https://best-dumps.su/ ;; QUESTION SECTION: ;best-dumps.su. IN NS ;; ANSWER SECTION: best-dumps.su. 14399 IN NS ns2.domen-domik.ru. best-dumps.su. 14399 IN NS ns1.domen-domik.ru. ns1.domen-domik.ru. 7139 IN A 145.239.124.225 ns2.domen-domik.ru. 7135 IN A 5.188.89.74 _________________ ns1.domen-domik.ru. 7139 IN A 45.156.119.7 ns2.domen-domik.ru. 7135 IN A… Читать далее Carding fraud site/forum DNS: domen-domik.ru (best-dumps.su / yalelodge-shop.com / sky-fraud.su etc.)
Spam source @52.100.18.249
Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-he1eur04hn0249.outbound.protection.outlook.com [52.100.18.249]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN «mail.protection.outlook.com», Issuer «DigiCert Cloud Services CA-1» (not verified)) by X (Postfix) with ESMTPS id X for <X>; Fri, 25 Feb 2022 X […] Received: from VI1PR01MB6927.eurprd01.prod.exchangelabs.com ([fe80::ce5:6f67:619f:dd63]) by VI1PR01MB6927.eurprd01.prod.exchangelabs.com ([fe80::ce5:6f67:619f:dd63%4]) with mapi id X; Fri, 25 Feb 2022 X Message-ID: <X@edumail.at>… Читать далее Spam source @52.100.18.249
Spammer hosting @95.217.232.235
;; QUESTION SECTION: ;wealthy-investors.com. IN A ;; ANSWER SECTION: wealthy-investors.com. 240 IN A 23.231.40.101 wealthy-investors.com. 240 IN A 95.217.232.235 wealthy-investors.com. 240 IN A 104.223.153.137 wealthy-investors.com. 240 IN A 144.91.89.195 wealthy-investors.com. 240 IN A 31.207.45.238
Spammer hosting @144.91.89.195
;; QUESTION SECTION: ;wealthy-investors.com. IN A ;; ANSWER SECTION: wealthy-investors.com. 240 IN A 23.231.40.101 wealthy-investors.com. 240 IN A 95.217.232.235 wealthy-investors.com. 240 IN A 104.223.153.137 wealthy-investors.com. 240 IN A 144.91.89.195 wealthy-investors.com. 240 IN A 31.207.45.238
Spam source @34.230.180.5
Received: from aws4.wpgamahost4.com (aws4.wpgamahost4.com [34.230.180.5]) by X (Postfix) with ESMTP id X for <X>; Fri, 25 Feb 2022 X X-LinkedIn-fbl: X Acceleration-Overturn: stool Require-Recipient-Valid-Since: X; Fri, 25 Feb 2022 X Content-ID: html-body X-LinkedIn-Class: EMAIL-DEFAULT Subject: You have 1 new message Dreyfuss-Factorizations-Ligature: X X-LinkedIn-Id: X Date: Fri, 25 Feb 2022 X Told-Acquisition: X Message-ID: <X.X@aws4.wpgamahost4.com> MIME-Version:… Читать далее Spam source @34.230.180.5
Spammer hosting @18.195.174.160
educationfinancings.com A 18.195.174.160 prizetrackings.com A 18.195.174.160 yourbranding.info A 18.195.174.160 brandinggoalsinf.com A 18.195.174.160 topdatingspace.com A 18.195.174.160 redirectingtothenextpage.com A 18.195.174.160 brandingaim.com A 18.195.174.160 browsing-safe-global.com A 18.195.174.160 trackingredirectnew.com A 18.195.174.160 toppaymentz.com A 18.195.174.160 click-secured.com A 18.195.174.160 secured-base.com A 18.195.174.160 spider-secured.com A 18.195.174.160 secured-nexus.com A 18.195.174.160 today-secured.com A 18.195.174.160 businessmarketingz.club A 18.195.174.160 goodmarketinggroup.club A 18.195.174.160 yourbrandingzone.com A 18.195.174.160 hoverbrandings.com… Читать далее Spammer hosting @18.195.174.160
Spam source @54.240.48.39
Received: from a48-39.smtp-out.amazonses.com (a48-39.smtp-out.amazonses.com [54.240.48.39]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (Client did not present a certificate) by X (Postfix) with ESMTPS id X for <X>; Thu, 24 Feb 2022 X DKIM-Signature: X From: «Emilia, Account Admin» <withdrawalpage@outlook.com> Subject: X, =?utf-8?q?l=C3=B6sen?= Sie Ihre BTC ein, um eine Kontosperrung zu vermeiden To: X Content-Type: multipart/alternative;… Читать далее Spam source @54.240.48.39
Spam source @52.100.156.201
Received: from NAM10-DM6-obe.outbound.protection.outlook.com (mail-dm6nam10hn2201.outbound.protection.outlook.com [52.100.156.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN «mail.protection.outlook.com», Issuer «DigiCert Cloud Services CA-1» (not verified)) by X (Postfix) with ESMTPS id X for <X>; Fri, 25 Feb 2022 X […] Received: from BYAPR16MB3991.namprd16.prod.outlook.com ([fe80::fcc5:3d72:7c52:95a7]) by BYAPR16MB3991.namprd16.prod.outlook.com ([fe80::fcc5:3d72:7c52:95a7%4]) with mapi id X; Fri, 25 Feb 2022 X Message-ID: <X@aliat.edu.mx>… Читать далее Spam source @52.100.156.201
Spam source @40.107.92.88
Received: from NAM10-BN7-obe.outbound.protection.outlook.com (mail-bn7nam10on2088.outbound.protection.outlook.com [40.107.92.88]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN «mail.protection.outlook.com», Issuer «DigiCert Cloud Services CA-1» (not verified)) by X (Postfix) with ESMTPS id X for <X>; Fri, 25 Feb 2022 X (UTC) […] Received: from BN8PR03MB5042.namprd03.prod.outlook.com ([fe80::cd21:cb43:352:21dd]) by BN8PR03MB5042.namprd03.prod.outlook.com ([fe80::cd21:cb43:352:21dd%7]) with mapi id X; Fri, 25 Feb 2022 X Message-ID:… Читать далее Spam source @40.107.92.88
Spam source @40.107.92.131
Received: from NAM10-BN7-obe.outbound.protection.outlook.com (mail-bn7nam10on2131.outbound.protection.outlook.com [40.107.92.131]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN «mail.protection.outlook.com», Issuer «DigiCert Cloud Services CA-1» (not verified)) by X (Postfix) with ESMTPS id X for <X>; Fri, 25 Feb 2022 X […] Received: from BN8PR03MB5121.namprd03.prod.outlook.com ([fe80::2819:1276:e278:eb71]) by BN8PR03MB5121.namprd03.prod.outlook.com ([fe80::2819:1276:e278:eb71%5]) with mapi id X; Fri, 25 Feb 2022 X Message-ID: <X@utpl.edu.ec>… Читать далее Spam source @40.107.92.131