IP info including ISP, Usage Type, and Location provided
by IPInfo. Updated weekly.
Important Note: 104.21.68.218 is an IP address from within
our whitelist belonging to the subnet
104.16.0.0/13,
which we identify as: "Cloudflare Reverse Proxy".
Whitelisted netblocks are typically owned by trusted entities, such as Google
or Microsoft who may use them for search engine spiders. However, these same entities
sometimes also provide cloud servers and mail services which are easily abused. Pay special
attention when trusting or distrusting these IPs.
title: Super Copy N grade
category: fake brand EC shop and sending spam e-mail
goods: fake watch
...
show moretitle: Super Copy N grade
category: fake brand EC shop and sending spam e-mail
goods: fake watch
brand: Rolex, Bvlgari, Hublot, e.t.c.
location: HongKong
language: Japanese
e-mail receive date: Tue, 3 May 2022 09:33:12 +0900
---- site 1
URL: https://www.shopcod777.com/
domain: www.shopcod777.com
IP v6 address: 2606:4700:3031::6815:44da / 2606:4700:3037::ac43:c6f7
IP v4 address: 172.67.198.247 / 104.21.68.218
---- site 2
URL: https://www.saleshop66.com/
domain: www.saleshop66.com
IP v6 address: 2606:4700:3036::ac43:d4af / 2606:4700:3037::6815:25c4
IP v4 address: 104.21.37.196 / 172.67.212.175
----
country: USA
hosting: Cloudflare, Inc
contact form: https://www.cloudflare.com/abuse
e-mail: [email protected], [email protected], [email protected]show less
Fraud Orders
Email Spam
Spoofing
Anonymous
From: Blood Sugar Fix <[email protected]>
Glucofort/BuyGoods fake health testimonials – R ...
show moreFrom: Blood Sugar Fix <[email protected]>
Glucofort/BuyGoods fake health testimonials – RU scamvertising – click tracking
UBE 89.144.57.47 (EHLO dealqs.offfers.shop) GHOSTnet GmbH
Header dealqs.offfers.shop = ditto
Domain offfers.shop = 89.144.4.211 GHOSTnet GmbH
Spam link godoffre.duckdns.org (199.231.188.170 - previous 85.93.27.253) – redirects: www.biggvalues.com (70.37.99.62 previous 89.43.30.30), glucofort.com, display.buygoods.com, www.buygoods.com, cdnjs.cloudflare.com, code.jquery.com, unsub: www.drivetiewhite.com, maxcdn.bootstrapcdn.com, ds2r9mr2r4h38.cloudfront.net, api.optoutsystem.com
NOTE – root spam link consistently tied to Aria marketing services. Address has appeared in reward fraud blogs.
22nd Innovative St, San Francisco, CA 84043
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Bad Web Bot
Anonymous
"… able to free myself of my type 2 diabetes in only five weeks …"
From: Blood Sugar MD <noreply@ch ...
show more"… able to free myself of my type 2 diabetes in only five weeks …"
From: Blood Sugar MD <[email protected]>
Glucofort/BuyGoods fake health testimonials – RU scamvertising – click tracking
UBE 89.144.14.63 (EHLO uku0.choiice.shop) GHOSTnet GmbH
Header SPF choiice.shop = 89.144.12.239 GHOSTnet GmbH
Spam link BLACKLISTED www.myhomestrack.com – redirects: glucofort.com, tracking.buygoods.com, display.buygoods.com, www.buygoods.com, code.jquery.com, stackpath.bootstrapcdn.com, www.ep20trk.com
Spam link holiddays.duckdns.org
Spam link www.twostringwire.com – tracking: maxcdn.bootstrapcdn.com, ds2r9mr2r4h38.cloudfront.net, api.optoutsystem.com
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Bad Web Bot
Anonymous
From: Blood Sugar MD <[email protected]>
Fake health news Glucofort/BuyGoods
UBE Received ...
show moreFrom: Blood Sugar MD <[email protected]>
Fake health news Glucofort/BuyGoods
UBE Received: from 89.144.14.54 (EHLO 2w2k.offerscare.co.uk) GHOSTnet GmbH
Header Reply-to: <[email protected]> = 89.144.10.251 GHOSTnet GmbH
Spam link bit.ly/3DmUgIa = 67.199.248.10, 67.199.248.11 Bitly – redirects:
- www.stockersit.com = 89.43.30.26 Netinternet Bilisim Teknolojileri AS
- glucofort.com = 104.21.68.218, 172.67.198.247 Cloudflare
- display.buygoods.com = 172.66.43.115, 172.66.40.141 Cloudflare
- www.buygoods.com = ditto
- go.maxweb.com = 172.66.43.113, 172.66.40.143 Cloudflare
- code.jquery.com = 69.16.175.10, 69.16.175.42 Highwinds Network Group
Spam link www.twostringwire.com = 40.64.49.241 Microsoft – tracking:
- maxcdn.bootstrapcdn.com = 104.18.10.207, 104.18.11.207 Cloudflare
- ds2r9mr2r4h38.cloudfront.net = 18.67.79.45, 18.67.79.65, 18.67.79.86, 18.67.79.213 Amazon
- api.optoutsystem.com = 52.26.140.116... Amazon
Spam link offersdeals.duckdns.org = 199.231.188.170 Interserver Inc.
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Bad Web Bot
Anonymous
Fake health testimonial - Glucofort: " … I was able to free myself of my type 2 diabetes in only fiv ...
show moreFake health testimonial - Glucofort: " … I was able to free myself of my type 2 diabetes in only five weeks … "
From: Blood Sugar MD <[email protected]>
UBE 185.55.242.67 (EHLO ed7s.offerscare.co.uk) Layer7 Networks GmbH
Header Reply-to: <[email protected]> = 89.144.10.251 GHOSTnet GmbH
Spam link bit.ly/3DmUgIa = 67.199.248.10, 67.199.248.11 Bitly – redirects:
- www.stockersit.com = 89.43.30.26 Netinternet Bilisim
- glucofort.com = 104.21.68.218, 172.67.198.247 Cloudflare
- display.buygoods.com = 172.66.43.115, 172.66.40.141 Cloudflare
- www.buygoods.com = ditto
- go.maxweb.com = 172.66.43.113, 172.66.40.143 Cloudflare
- code.jquery.com = 69.16.175.10, 69.16.175.42 Highwinds Network Group
Spam link www.twostringwire.com = 40.64.49.241 Microsoft – tracking:
- maxcdn.bootstrapcdn.com = 104.18.10.207, 104.18.11.207 Cloudflare
- ds2r9mr2r4h38.cloudfront.net = 18.67.79.45, 18.67.79.65, 18.67.79.86, 18.67.79.213 Amazon
Spam link offersdeals.duckdns.org = 199.231.188.170
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Bad Web Bot
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩