Sending out phishing spam emails from IP 191.101.130.137
This is yet another phishing attempt. T ...
show moreSending out phishing spam emails from IP 191.101.130.137
This is yet another phishing attempt. Trying to make it
look like Canada Revenue Agency ("CRA") sent this when
they did not.
The spammer's websites are located at
https://icr-000b.com/
IP: 176.53.147.25 (virtualdc.ru) (AS48108)
https://www.cidr-report.org/cgi-bin/as-report?as=AS48108
Yet another scam do not go to this website!
show less
Sending out spam phishing emails saying
I made a purchase from Microsoft for $395.10
Yet anothe ...
show moreSending out spam phishing emails saying
I made a purchase from Microsoft for $395.10
Yet another phishing attempt.
This spam was sent from IP 104.47.59.174
(microsoft.com)
The spammer's websites are located at
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT0wODYyZjMwYS1lOTk0LTRjOWQtYTFmOC01YTZiNjk4NGVmZjcmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l
IP: 13.107.246.70 (microsoft.com)
show less
Sending out spam phishing emails saying
I made a purchase from Microsoft for $395.10
Yet anothe ...
show moreSending out spam phishing emails saying
I made a purchase from Microsoft for $395.10
Yet another phishing attempt.
This spam was sent from IP 104.47.59.174
(microsoft.com)
The spammer's websites are located at
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2Fadminportal%2Fhome%3F%23%2Fsubscriptions&p=bT0wODYyZjMwYS1lOTk0LTRjOWQtYTFmOC01YTZiNjk4NGVmZjcmcz0wMDAwMDAwMC0wMDAwLTAwMDAtMDAwMC0wMDAwMDAwMDAwMDAmdT1hZW8mbD1ob21l
IP: 13.107.246.70 (microsoft.com)
show less
Sending out spam emails for LubeFx an oil change company.
sending out spam from IP 149.72.63.254 (s ...
show moreSending out spam emails for LubeFx an oil change company.
sending out spam from IP 149.72.63.254 (sendgrid.net) (AS11377)
The spammer's websites are located at
https://link.mail.beehiiv.com/ss/c/u001.EjfAwBYF1YbroVcBcjLzIH8B_TrhSRxLq2lKuah6xqxzfjiZchUQ-r2abVFmJMWL4pHtqofBVhZTUwSPfiLNWhcM5W5YX_En22yMxUGMSba_1L0LMc4D060jc05DB_rZ2lhoyk3Wr37OSVjZChgUXbj8hyD2toZP93B32mW8WrD8NsauTdCAWnG-eqowp9zSkhoVLmbh5WyLdRYhsstIF9L4gyrlS65SL6gjhOCf7F7r52KvH14xSAkser2uL9HAeD_iONDbTwkSP4IKHHXULuCrRGYZfDX3GTOTfRgt-K8/4ce/vmLVZE1lTUmk3yBpADZ8qA/h8/h001.6E1V6qB6Jb8imwuP-cX5QpyJbXlyVTmIW-DTRgibGyw
IPs:104.18.68.40, 104.18.69.40 (cloudflare.com) (AS13335)
Which redirects to
https://lubefx.com/wp-content/uploads/2024/12/LubeFX_WinterDeal-Coupons-1.jpg?utm_source=lubefx.beehiiv.com&utm_medium=newsletter&utm_campaign=cool-winter-deal&_bhlid=454e1cdfd536a6e2e24943a0b79bae2a7382794e
IP: 148.135.130.58 (hostinger.com)(AS47583)
https://www.cidr-report.org/cgi-bin/as-report?as=AS47583
show less
Sending out spam emails for LubeFx an oil change company.
sending out spam from IP 149.72.63.254 (s ...
show moreSending out spam emails for LubeFx an oil change company.
sending out spam from IP 149.72.63.254 (sendgrid.net) (AS11377)
The spammer's websites are located at
https://link.mail.beehiiv.com/ss/c/u001.EjfAwBYF1YbroVcBcjLzIH8B_TrhSRxLq2lKuah6xqxzfjiZchUQ-r2abVFmJMWL4pHtqofBVhZTUwSPfiLNWhcM5W5YX_En22yMxUGMSba_1L0LMc4D060jc05DB_rZ2lhoyk3Wr37OSVjZChgUXbj8hyD2toZP93B32mW8WrD8NsauTdCAWnG-eqowp9zSkhoVLmbh5WyLdRYhsstIF9L4gyrlS65SL6gjhOCf7F7r52KvH14xSAkser2uL9HAeD_iONDbTwkSP4IKHHXULuCrRGYZfDX3GTOTfRgt-K8/4ce/vmLVZE1lTUmk3yBpADZ8qA/h8/h001.6E1V6qB6Jb8imwuP-cX5QpyJbXlyVTmIW-DTRgibGyw
IPs:104.18.68.40, 104.18.69.40 (cloudflare.com) (AS13335)
Which redirects to
https://lubefx.com/wp-content/uploads/2024/12/LubeFX_WinterDeal-Coupons-1.jpg?utm_source=lubefx.beehiiv.com&utm_medium=newsletter&utm_campaign=cool-winter-deal&_bhlid=454e1cdfd536a6e2e24943a0b79bae2a7382794e
IP: 148.135.130.58 (hostinger.com)(AS47583)
https://www.cidr-report.org/cgi-bin/as-report?as=AS47583
show less
Sending out spam emails for LubeFx an oil change company.
sending out spam from IP 149.72.63.254 (s ...
show moreSending out spam emails for LubeFx an oil change company.
sending out spam from IP 149.72.63.254 (sendgrid.net) (AS11377)
The spammer's websites are located at
https://link.mail.beehiiv.com/ss/c/u001.EjfAwBYF1YbroVcBcjLzIH8B_TrhSRxLq2lKuah6xqxzfjiZchUQ-r2abVFmJMWL4pHtqofBVhZTUwSPfiLNWhcM5W5YX_En22yMxUGMSba_1L0LMc4D060jc05DB_rZ2lhoyk3Wr37OSVjZChgUXbj8hyD2toZP93B32mW8WrD8NsauTdCAWnG-eqowp9zSkhoVLmbh5WyLdRYhsstIF9L4gyrlS65SL6gjhOCf7F7r52KvH14xSAkser2uL9HAeD_iONDbTwkSP4IKHHXULuCrRGYZfDX3GTOTfRgt-K8/4ce/vmLVZE1lTUmk3yBpADZ8qA/h8/h001.6E1V6qB6Jb8imwuP-cX5QpyJbXlyVTmIW-DTRgibGyw
IPs:104.18.68.40, 104.18.69.40 (cloudflare.com) (AS13335)
Which redirects to
https://lubefx.com/wp-content/uploads/2024/12/LubeFX_WinterDeal-Coupons-1.jpg?utm_source=lubefx.beehiiv.com&utm_medium=newsletter&utm_campaign=cool-winter-deal&_bhlid=454e1cdfd536a6e2e24943a0b79bae2a7382794e
IP: 148.135.130.58 (hostinger.com)(AS47583)
https://www.cidr-report.org/cgi-bin/as-report?as=AS47583
show less
Sending out spam emails for LubeFx an oil change company.
sending out spam from IP 149.72.63.254 (s ...
show moreSending out spam emails for LubeFx an oil change company.
sending out spam from IP 149.72.63.254 (sendgrid.net) (AS11377)
The spammer's websites are located at
https://link.mail.beehiiv.com/ss/c/u001.EjfAwBYF1YbroVcBcjLzIH8B_TrhSRxLq2lKuah6xqxzfjiZchUQ-r2abVFmJMWL4pHtqofBVhZTUwSPfiLNWhcM5W5YX_En22yMxUGMSba_1L0LMc4D060jc05DB_rZ2lhoyk3Wr37OSVjZChgUXbj8hyD2toZP93B32mW8WrD8NsauTdCAWnG-eqowp9zSkhoVLmbh5WyLdRYhsstIF9L4gyrlS65SL6gjhOCf7F7r52KvH14xSAkser2uL9HAeD_iONDbTwkSP4IKHHXULuCrRGYZfDX3GTOTfRgt-K8/4ce/vmLVZE1lTUmk3yBpADZ8qA/h8/h001.6E1V6qB6Jb8imwuP-cX5QpyJbXlyVTmIW-DTRgibGyw
IPs: 104.18.68.40, 104.18.69.40 (cloudflare.com) (AS13335)
Which redirects to
https://lubefx.com/wp-content/uploads/2024/12/LubeFX_WinterDeal-Coupons-1.jpg?utm_source=lubefx.beehiiv.com&utm_medium=newsletter&utm_campaign=cool-winter-deal&_bhlid=454e1cdfd536a6e2e24943a0b79bae2a7382794e
IP: 148.135.130.58 (hostinger.com)(AS47583)
https://www.cidr-report.org/cgi-bin/as-report?as=AS47583
show less
[Sun May 05 22:05:16.480384 2024] [auth_basic:error] [pid 276869] [client 45.128.232.229:49994] AH01 ...
show more[Sun May 05 22:05:16.480384 2024] [auth_basic:error] [pid 276869] [client 45.128.232.229:49994] AH01618: user wont not found: /
[Sun May 05 22:05:17.190753 2024] [auth_basic:error] [pid 1442513] [client 45.128.232.229:50002] AH01618: user admin not found: /
[Sun May 05 22:05:19.224400 2024] [auth_basic:error] [pid 277368] [client 45.128.232.229:50016] AH01618: user Admin not found: /
...
show less