Running a 2024 New Year Guinness Brewery Email Lottery SCAM. More 411 here:
https://pastebin.com ...
show moreRunning a 2024 New Year Guinness Brewery Email Lottery SCAM. More 411 here:
https://pastebin.com/gQfQ1Jff
show less
#IPDOTUSCREW
https://pastebin.com/7b2eWnSG
X-MS-Exchange-Authentication-Results: spf=fail (sen ...
show more#IPDOTUSCREW
https://pastebin.com/7b2eWnSG
X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 45.83.41.138)
smtp.mailfrom=x44rm9i.onmicrosoft.com; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=x44rm9i.onmicrosoft.com;
36 Piece Tupperware Modular Set Giveaway: Share Your Opinion
show less
#IPDOTUSCREW
Running a Costco SCAM.
https://pastebin.com/7b2eWnSG
https://pastebin.com/7b2eWn ...
show more#IPDOTUSCREW
Running a Costco SCAM.
https://pastebin.com/7b2eWnSG
https://pastebin.com/7b2eWnSG
show less
Running a inheritance fund SCAM using Kelvin Roberts as SCAM donor.
"Did you receive my previous ...
show moreRunning a inheritance fund SCAM using Kelvin Roberts as SCAM donor.
"Did you receive my previous email? regarding an inheritance fund Warms Regard Kelvin Roberts"
https://pastebin.com/Wd0Njff8
show less
Running a inheritance fund SCAM using Kelvin Roberts as SCAM donor.
"Did you receive my previous ...
show moreRunning a inheritance fund SCAM using Kelvin Roberts as SCAM donor.
"Did you receive my previous email? regarding an inheritance fund Warms Regard Kelvin Roberts"
https://pastebin.com/Wd0Njff8
show less
Running a malware SPAM campaign:
https://pastebin.com/7b2eWnSG
X-MS-Exchange-CrossTenant-Origi ...
show moreRunning a malware SPAM campaign:
https://pastebin.com/7b2eWnSG
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=45d92b2d-da0c-4479-9b80-2ae29672b903;Ip=[193.176.179.15];Helo=[dfgr.zaer.logitecch.store]
X-MS-Exchange-CrossTenant-AuthSource:
show less
Running phishing SCAM with cutt.ly links
Re: Upgrade Your Toolkit with Our Comfort Grip Screwdriv ...
show moreRunning phishing SCAM with cutt.ly links
Re: Upgrade Your Toolkit with Our Comfort Grip Screwdriver Set!
https://www.virustotal.com/gui/url/3847540e05e6931373251157607531b141c4599fcbed620f5760f05bf2f04ea1/detection
show less
Running a Miss Zihan investment SCAM:
https://pastebin.com/ZtUfxc6h
"Good Day,
I have a bus ...
show moreRunning a Miss Zihan investment SCAM:
https://pastebin.com/ZtUfxc6h
"Good Day,
I have a business proposal that will be profitable for both of us, No upfront fee is required, contact me prior to providing you with further communications."
show less
Running a state of Libya SCAM.
Do you want to execute a multi million dollar supply / services co ...
show moreRunning a state of Libya SCAM.
Do you want to execute a multi million dollar supply / services contract project with the State of Libya Government?
Regards
Tijani
Authentication-Results: spf=fail (sender IP is 98.159.36.137)
smtp.mailfrom=csc.gov.ly; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=csc.gov.ly;compauth=fail
reason=001
show less
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=a01d98f8-0352-4b0b-8366-03d ...
show moreX-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=a01d98f8-0352-4b0b-8366-03de14849325;Ip=[45.91.8.219];Helo=[mail.newegg.ca]
X-MS-Exchange-CrossTenant-AuthSource:
show less
#IPDOTUSCREW
Sends malware SPAM using newly created Office 365 accounts. Domains always end in . ...
show more#IPDOTUSCREW
Sends malware SPAM using newly created Office 365 accounts. Domains always end in .us and are normally registered and hosted with OVH.
Sample Domains:
ip-15-204-76.us
ip-147-135-78.us
Sample E-Mail Subject | Sample Sender Name:
Ace Hardware | Final Notice Coming for a Dewalt-LED Work Light Reward
Warm Up Your Home for Less with Elon's Invention! | Heating Revolution by Elon
Is your Antivirus Updated? | -Security Notice
Emergency Fire Blanket /| Emergency Fire Blanket
Take Control of Your Energy Usage with StopWatt-- | Elon Power bank
Sample Sender Names:
Elon Power Bank
https://www.virustotal.com/gui/url/19c82091bfe1730ccf129bb56dc5e85cf6966ae533ebd415370d4e0cfb48ab81
https://www.virustotal.com/gui/url/4873feaabb6540d02c13ddae1a5944887057a3c47e9655b1a843aa93f9774497
https://www.virustotal.com/gui/url/f15d202c99698a8807c34538a733f1486e722f06073d9284ca0fd30e7084a5ee?nocache=1
show less
#IPDOTUSCREW
Sends malware SPAM using newly created Office 365 accounts. Domains always end in . ...
show more#IPDOTUSCREW
Sends malware SPAM using newly created Office 365 accounts. Domains always end in .us and are normally registered and hosted with OVH.
Sample Domains:
ip-15-204-76.us
ip-147-135-78.us
https://www.virustotal.com/gui/url/4873feaabb6540d02c13ddae1a5944887057a3c47e9655b1a843aa93f9774497
https://www.virustotal.com/gui/url/f15d202c99698a8807c34538a733f1486e722f06073d9284ca0fd30e7084a5ee?nocache=1
show less
Hosts malware spam disseminated via newly created O365 accounts.
ip226.ip-15-204-76.us
https:/ ...
show moreHosts malware spam disseminated via newly created O365 accounts.
ip226.ip-15-204-76.us
https://www.virustotal.com/gui/url/5841aa16df95df4edc22f67e12c5075eb81e846ce1172fec91cb28323d066e2d/details
show less
PhishingEmail Spam
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.