🇺🇸
analysisphishing
2026-02-13 06:11:52
(4 months ago)
We have detected malicious redirection targeting "Pusulabet" users, where traffic is diverted to fra ...
show more
We have detected malicious redirection targeting "Pusulabet" users, where traffic is diverted to fraudulent resources such as: https://pusulabet.puslabonus-siteler.com. This redirection leads unsuspecting users to phishing pages, enabling unauthorized collection of credentials and personal data.
This activity constitutes fraud, unfair competition, and infringement upon our intellectual property rights. It also violates consumer protection regulations by misleading users and causing reputational and financial harm.
We kindly request AbuseIPDB to take prompt measures to disable this malicious infrastructure and prevent further abuse.
Best regards,
Brand Protection Officer
Pusulabet Legal Team
show less
Phishing
Hacking
Web App Attack
Anonymous
2022-07-23 12:02:13
(3 years ago)
From: "AirPods Surprise" <[email protected] >
SCAM: "…in cooperation with Online ...
show more
From: "AirPods Surprise" <[email protected] >
SCAM: "…in cooperation with OnlineMart…"
Received: from 91.208.162.30 (EHLO animisgpdq.xervnghkoipom.live) ALEXHOST S.R.L.
Header xervnghkoipom.live = 91.208.162.27 ALEXHOST S.R.L.
Repetitive message URL vazlinokhgr.co = 208.115.223.99 Limestone Networks – redirects:
- urgentuslime.com = 172.99.173.210 Baxet Group Inc
- vnnylalob.com = 104.21.66.232, 172.67.209.28 Cloudflare
- landing: credentalism.com = 104.21.64.9, 172.67.173.188 Cloudflare
- trk-praesentium.com = 104.21.65.100, 172.67.165.74 Cloudflare
- a.mgid.com = 104.19.132.78, 104.19.133.78, 104.19.134.78, 104.19.135.78, 104.19.136.78 Cloudflare
- event.trk-praesentium.com = 104.21.65.180, 172.67.165.74 Cloudflare
message URL redirect: "CREDENTALISM.COM is a survey service…" previous phishing surveys: OMNITERACE.COM, PAVILIONSNOT.COM, LOCOMOTORYTEE.COM, VOTARYFQUANT.COM, quayretainer.com, XYLITROLWATER.COM, STARTTERJOLT.COM, ENMITYTRINITY
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Spoofing
Bad Web Bot
Exploited Host
Anonymous
2022-07-22 08:38:42
(3 years ago)
From: Verizon <[email protected] >
Reward fraud – redirect BOT
Received: fro ...
show more
From: Verizon <[email protected] >
Reward fraud – redirect BOT
Received: from 194.246.100.38 (EHLO voluptatemqfsmb.boklenparo.com) MAGIT'ST SRL
Header boklenparo.com = 194.246.100.26 MAGIT'ST SRL
Spam link vazlinokhgr.co = 208.115.223.99 Limestone Networks – redirects:
- urgentuslime.com = 172.99.173.210 Baxet Group Inc
- vnnylalob.com = 104.21.66.232, 172.67.209.28 Cloudflare
- landing: omniterace.com = 104.21.63.191, 172.67.171.180 Cloudflare
- trk-praesentium.com = 104.21.65.100, 172.67.165.74 Cloudflare
- a.mgid.com = 104.19.132.78, 104.19.133.78, 104.19.134.78, 104.19.135.78, 104.19.136.78 Cloudflare
- event.trk-praesentium.com = 104.21.65.180, 172.67.165.74 Cloudflare
RU Reward fraud - message URL redirect: "OMNITERACE.COM is a survey service…" - content + terms consistent with previous phishing surveys: PAVILIONSNOT.COM, LOCOMOTORYTEE.COM, VOTARYFQUANT.COM, quayretainer.com, XYLITROLWATER.COM – redirect BOT - fake testimonials – click tracking
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Spoofing
Bad Web Bot
Exploited Host
Anonymous
2022-07-20 18:18:44
(3 years ago)
From: Kohl's Winner <[email protected] >
RU reward fraud – redirect BOT
Received: from 194.2 ...
show more
From: Kohl's Winner <[email protected] >
RU reward fraud – redirect BOT
Received: from 194.246.100.26 (EHLO boklenparo.com) MAGIT'ST SRL
Spam link vazlinokhgr.co = 208.115.223.99 Limestone Networks – redirects:
- urgentuslime.com = 172.99.173.210 Baxet Group Inc
- vnnylalob.com = 104.21.66.232, 172.67.209.28 Cloudflare
- landing: omniterace.com = 104.21.63.191, 172.67.171.180 Cloudflare
- trk-praesentium.com = 104.21.65.100, 172.67.165.74 Cloudflare
- a.mgid.com = 104.19.132.78, 104.19.133.78, 104.19.134.78, 104.19.135.78, 104.19.136.78 Cloudflare
- event.trk-praesentium.com = 104.21.65.180, 172.67.165.74 Cloudflare
RU Reward fraud - message URL redirect: "OMNITERACE.COM is a survey service…" - content + terms consistent with previous phishing surveys: PAVILIONSNOT.COM, LOCOMOTORYTEE.COM, VOTARYFQUANT.COM, quayretainer.com, XYLITROLWATER.COM – redirect BOT - fake testimonials – click tracking
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Spoofing
Bad Web Bot
Exploited Host
🇺🇸
Malware Report
2022-07-20 08:37:41
(3 years ago)
WARNING: https://vnnylalob.com is part of a large Russian based Botnet Spamming network used for Phi ...
show more
WARNING: https://vnnylalob.com is part of a large Russian based Botnet Spamming network used for Phising and distributing malware and is associated with these domains: qoqomoda.ink cozinadargo.ink www.tweeneafu.com www.thedailyyami.com fixbackpain.org lopasdoga.online sieradistinct.com xpointerslad.com noscrublinks.com midsizehands.com jingosticsol.com www.goldothers.com novemberndecember.com gabagul.com jeariaf.com grimilaugh.com greywish.com ethoswings.com arcnia.com tweeneafu.com laudypauty.com rigidsupper.com get-tvidler.com www.slotsofvegaslinks.com vnnylalob.com equalittarians.com frstlinksthenleads.com doblespeakers.com macinline.com zorpingwarp.com castorsgazer.com krimmercall.com davidcdaniel.us kachtus.net grandrapidsaftermath.com www.phalogenics.com totalitarlink.com secudatago.com imaginelbe.com olfactivglue.com cardiacflower.com www.claimtodaywinner.com socley.com kngarie.com letscashnow.com jibbyjab.com getnuubu.com www.ragingbulllinks.com eightslooks.com combatcubes.com www.hypertr4ffic.com ETC
show less
Phishing
Email Spam
Spoofing
Bad Web Bot
Exploited Host
Anonymous
2022-07-19 14:56:30
(3 years ago)
https://vnnylalob.com/?s1=350465&s2=761476171&s3=1571&s4=0&ow=&s10=739
Phishing
Web Spam
Anonymous
2022-07-19 12:20:25
(3 years ago)
From: Smart Watch Winner <[email protected] >
Spoofing/fraud
Received: from 1 ...
show more
From: Smart Watch Winner <[email protected] >
Spoofing/fraud
Received: from 194.242.46.156 (EHLO quisquamesvns.retenalom.co.uk) MAGIT'ST SRL
Spam link vazlinokhgr.co = 208.115.223.99 Limestone Networks – redirects:
- urgentuslime.com = 172.99.173.210 Baxet Group Inc
- vnnylalob.com = 104.21.66.232, 172.67.209.28 Cloudflare
- landing: omniterace.com = 104.21.63.191, 172.67.171.180 Cloudflare
- trk-praesentium.com = 104.21.65.100, 172.67.165.74 Cloudflare
- a.mgid.com = 104.19.132.78, 104.19.133.78, 104.19.134.78, 104.19.135.78, 104.19.136.78 Cloudflare
- event.trk-praesentium.com = 104.21.65.180, 172.67.165.74 Cloudflare
Reward fraud - message URL redirect: "OMNITERACE.COM is a survey service…" - content + terms consistent with previous phishing surveys: PAVILIONSNOT.COM, LOCOMOTORYTEE.COM, VOTARYFQUANT.COM, quayretainer.com, XYLITROLWATER.COM – redirect BOT - fake testimonials – click tracking
show less
Phishing
Web Spam
Email Spam
Spoofing
Bad Web Bot
Exploited Host
Anonymous
2022-07-18 11:39:38
(3 years ago)
From: … <[email protected] >
Norton spoofing – reward fraud
Received: from 148.72 ...
show more
From: … <[email protected] >
Norton spoofing – reward fraud
Received: from 148.72.172.104 (EHLO getg2ensitea.site) GoDaddy.com reallocated HEG US Inc./VELIANET-US
Spam link 194.156.100.172 – redirects: lacunadips.com, vnnylalob.com, omniterace.com, trk-praesentium.com, a.mgid.com, event.trk-praesentium.com
RU Reward fraud – message URL redirect: "OMNITERACE.COM is a survey service…" - content + terms consistent with: PAVILIONSNOT.COM, LOCOMOTORYTEE.COM, VOTARYFQUANT.COM, quayretainer.com, XYLITROLWATER.COM – redirect BOT – click tracking – "shipping fee"
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Spoofing
Bad Web Bot
Exploited Host
Anonymous
2022-07-17 09:56:01
(3 years ago)
RU reward fraud
From: Home Depot Surprise <[email protected] >
Received: from 163.1 ...
show more
RU reward fraud
From: Home Depot Surprise <[email protected] >
Received: from 163.172.194.20 (EHLO etbbkdg.operanikomlk.live) - SCALEWAY-DEDIBOX
Spam link vazlinokhgr.co = 208.115.223.99 Limestone Networks – redirects:
- urgentuslime.com = 172.99.173.210 Baxet Group Inc
- vnnylalob.com = 104.21.66.232, 172.67.209.28 Cloudflare
- landing: omniterace.com = 104.21.63.191, 172.67.171.180 Cloudflare
- trk-praesentium.com = 104.21.65.100, 172.67.165.74 Cloudflare
- a.mgid.com = 104.19.132.78, 104.19.133.78, 104.19.134.78, 104.19.135.78, 104.19.136.78 Cloudflare
- event.trk-praesentium.com = 104.21.65.180, 172.67.165.74 Cloudflare
Reward fraud – message URL redirect: "OMNITERACE.COM is a survey service…" - content + terms consistent with previous phishing surveys: PAVILIONSNOT.COM, LOCOMOTORYTEE.COM, VOTARYFQUANT.COM, quayretainer.com, XYLITROLWATER.COM - fake testimonials - click tracking - "small shipping fee"
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Spoofing
Bad Web Bot
Exploited Host
Anonymous
2022-07-16 09:01:12
(3 years ago)
RU reward fraud
From: Dewalt EXTREME Drill Confirmation <[email protected] >
S ...
show more
RU reward fraud
From: Dewalt EXTREME Drill Confirmation <[email protected] >
Subject: You have won an Dewalt EXTREME Drill
Received: from 194.246.100.38 (EHLO voluptatemqfsmb.boklenparo.com) - MAGIT'ST SRL
Spam link vazlinokhgr.co = 208.115.223.99 Limestone Networks – redirects:
- urgentuslime.com = 172.99.173.210 Baxet Group Inc
- vnnylalob.com = 104.21.66.232, 172.67.209.28 Cloudflare
- landing: omniterace.com = 104.21.63.191, 172.67.171.180 Cloudflare
- trk-praesentium.com = 104.21.65.100, 172.67.165.74 Cloudflare
- a.mgid.com = 104.19.132.78, 104.19.133.78, 104.19.134.78, 104.19.135.78, 104.19.136.78 Cloudflare
- event.trk-praesentium.com = 104.21.65.180, 172.67.165.74 Cloudflare
Reward fraud – message URL redirect: "OMNITERACE.COM is a survey service…" - content + terms consistent with previous phishing surveys: PAVILIONSNOT.COM, LOCOMOTORYTEE.COM, VOTARYFQUANT.COM, quayretainer.com - fake testimonials, click tracking, "shipping fee"
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Spoofing
Bad Web Bot
Exploited Host
Anonymous
2022-07-15 08:25:10
(3 years ago)
From: McAfee Official Store <[email protected] >
RU McAfee invoice/virus fraud
Re ...
show more
From: McAfee Official Store <[email protected] >
RU McAfee invoice/virus fraud
Received: from 31.210.171.103 (EHLO tindieysg.co.uk) EuroHoster Ltd.
Spam link 194.156.100.172 – redirects: lacunadips.com, vnnylalob.com, omniterace.com, trk-praesentium.com, a.mgid.com, event.trk-praesentium.com
RU Reward fraud – message URL redirect: "OMNITERACE.COM is a survey service…" - content + terms consistent with previous phishing surveys: PAVILIONSNOT.COM, LOCOMOTORYTEE.COM, VOTARYFQUANT.COM, quayretainer.com, XYLITROLWATER.COM, STARTTERJOLT.COM, ENMITYTRINITY.COM, NEATNIKDUNES.COM, TRIUMPHVOLCANO.COM, errasershirt.com, divergesneek.com, vapourstinger.com, ENTREEMASTER.COM, winnertodaywho.com, YETTMARINA.COM, YAUTIASBLIMP.COM, JUMPIERCLASS.COM, ROUNDSWITHSALT.COM, PRECISERADIANCE.COM, VENISONWINDOW.COM – repetitive fake testimonials with "current" time – click tracking
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Spoofing
Bad Web Bot
Exploited Host
🇺🇸
Malware Report
2022-07-11 18:08:00
(3 years ago)
MALWARE hosted at : https://vnnylalob.com/?s1=351197&s2=756191988&s3=2357&s4=0&ow=&s10=626
Phishing
Email Spam
Spoofing
Bad Web Bot
Exploited Host