Probably uses Whois lis t:
Received-SPF: pass (xxxxxx: domain of mspsmartweb.pro designates 178.1 ...
show moreProbably uses Whois lis t:
Received-SPF: pass (xxxxxx: domain of mspsmartweb.pro designates 178.159.36.226 as permitted sender) client-ip=178.159.36.226
Return-Path: <[email protected]>
Date: Sat, 10 Dec 2022 04:30:15 +0000
Subject: xxxxxx Expiration Notice
From: "xxxxxx Reminder" <[email protected]>
Reply-To: "xxxxxx Reminder" <[email protected]>
This email is to inform you that your domain invoice number xxx is OVERDUE. xxx.COM.COM expiring on 10 December 2022 is SUSPENDED. Please make payment ASAP to avoid any TERMINATION of service to xxx.COM
Please note that if no payment is made in the next 3 business days, your data will be purged and deleted.
TO RENEW xxx.COM (Expires on xxx 2022):
https://seoeworldnetwork.sk/cart/7673...md5...1245
...
show less
From Felica Hampton ([email protected])
« Your Site Has Been Hacked PLEASE FORWARD THI ...
show moreFrom Felica Hampton ([email protected])
« Your Site Has Been Hacked PLEASE FORWARD THIS EMAIL TO SOMEONE YOUR COMPANY WHO IS ALLOWED TO MAKE IMPORTANT DECISIONS! We have hacked your website https://www.xxx.com and extracted your databases. bla bla bla...
Please send the bitcoin to the following Bitcoin address (Copy and paste as it is case sensitive): 3LKf6NWhJA8L5cmD5p9u6WksjW9SC2jauu »
It's not true, it's a complete scam, an attempt to get paid even if no computer system has been compromised.
show less
From : [email protected]
Dear Customer,
Your parcel is waiting for delivery.
Ple ...
show moreFrom : [email protected]
Dear Customer,
Your parcel is waiting for delivery.
Please confirm the payment (2,99 CAD) on the link below,
The online verification needs to be done in the next 07 days before it expires :
https://www.pierretconcept.be/wp-content/upgrade/widgets/?...
show less
Hello!
Please click the button below to verify your email address :
https://sayvins.com/email/ve ...
show moreHello!
Please click the button below to verify your email address :
https://sayvins.com/email/verify/...
show less
Spam in form
« ...Wе will sеnd up tо 50,000 mеssаgеs fоr yоu... »
Contact us.
Telegram - @Fee ...
show moreSpam in form
« ...Wе will sеnd up tо 50,000 mеssаgеs fоr yоu... »
Contact us.
Telegram - @FeedbackMessages
Skype live:contactform_18
WhatsApp - +375259112693
We only use chat.
show less
Trolling for resource vulnerabilities
User-Agent : Mozilla/5.0 (iPhone; CPU iPhone OS 15_6_1 like ...
show moreTrolling for resource vulnerabilities
User-Agent : Mozilla/5.0 (iPhone; CPU iPhone OS 15_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML; like Gecko) Version/15.6.1 Mobile/15E148 Safari/604.1
show less
Trolling for resource vulnerabilities
User-Agent : Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW ...
show moreTrolling for resource vulnerabilities
User-Agent : Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML; like Gecko) Chrome/103.0.5060.134 Safari/537.36
show less
Trolling for resource vulnerabilities
User-Agent : Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple ...
show moreTrolling for resource vulnerabilities
User-Agent : Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML; like Gecko) Chrome/103.0.5060.134 Safari/537.36
show less
A silly and harmless spam form but monkeydigital.co (https://monkeydigital.net) has been abusing it ...
show moreA silly and harmless spam form but monkeydigital.co (https://monkeydigital.net) has been abusing it for years.
From - Sun Oct 16 10:00:13 2022
From: Mike Clapton ([email protected])
https://www.monkeydigital.co/domain-authority-plan/
show less
A silly and harmless spam form but monkeydigital.co (https://monkeydigital.net) has been abusing it ...
show moreA silly and harmless spam form but monkeydigital.co (https://monkeydigital.net) has been abusing it for years.
From - Sun Oct 16 10:00:13 2022
From: Mike Clapton ([email protected])
https://www.monkeydigital.co/domain-authority-plan/
show less
server.imagoinbio.com ([104.248.149.205])
From: "MAIL ADMINISTRATOR" <[email protected]>
Return ...
show moreserver.imagoinbio.com ([104.248.149.205])
From: "MAIL ADMINISTRATOR" <[email protected]>
Return-Path: <[email protected]>
Subject: [Server Report] Verify annual update: 915643729221
Date: 4 Oct 2022 21:21:27 +0200
** MAIL STORAGE CAPACITY UPGRADE **
xxx has limited storage capacity for sending and receiving messages.
https://api.viglink.com/api/click?sexvpmnvemoqsmeslksk&out=%68%74%74%70%3Atbdzkkogpq%2E%67%31%69%6B%2E%70%69%63%73%2Fmwawd/ro/WVdSdGFXNUFibVYxY21Gc015NWpiMjA9OnN2Z3N3dHdmdGg=&key=fd5de1d096b38be9fffd6ddc1948df4f
It doesn't use spoofing mail server, but uses the target domain name as the copyright at the bottom of the document...
show less
Your Site Has Been Hacked, blah blah blah...
PLEASE FORWARD THIS EMAIL TO SOMEONE YOUR COMPANY WH ...
show moreYour Site Has Been Hacked, blah blah blah...
PLEASE FORWARD THIS EMAIL TO SOMEONE YOUR COMPANY WHO IS ALLOWED TO MAKE IMPORTANT DECISIONS!
Please send the bitcoin to the following Bitcoin address (Copy and paste as it is case sensitive):
3LKf6NWhJA8L5cmD5p9u6WksjW9SC2jauu
It's a hoax, use web form :
From - Thu, 29 Sep 2022 14:16:09 -0400
Vern Metz ([email protected])
AGENT : Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36
show less
Just a long, innocuous and easy to detect spam email sent by a robot through a web form that falsely ...
show moreJust a long, innocuous and easy to detect spam email sent by a robot through a web form that falsely claims that our website and database has been hacked. This is of course false but he asks to pay $2500 in bitcoins (BTC).
From Oliva <[email protected]>
Mon, 26 Sep 2022 06:49:32 -0400
This is not a hoax, do not reply to this email, bla bla...
...Please send the bitcoin to the following Bitcoin address (Copy and paste as it is case sensitive):
3LKf6NWhJA8L5cmD5p9u6WksjW9SC2jauu
show less
From 51.79.230.104 (server.geomedia.id). Bad French translation advising me that I was hacked, that ...
show moreFrom 51.79.230.104 (server.geomedia.id). Bad French translation advising me that I was hacked, that he has control of my machine, that he knows that I visit sex sites, that he filmed me and that he will send the film to all my contacts ;-) All to extort money from me, a small 1500 EUR!
show less
From [email protected] (67.205.103.233)
Link : https://link-hub.net/335949/earn-extra-money ...
show moreFrom [email protected] (67.205.103.233)
Link : https://link-hub.net/335949/earn-extra-money redirection to linkvertise.com
show less
Spoofing domaine for phishing OVH domain upgrade.
Content :
Dear Customer, This notification is ...
show moreSpoofing domaine for phishing OVH domain upgrade.
Content :
Dear Customer, This notification is automatically sent to inform you that your domaine name xxx expires today. In case of non-renewal your domain will be suspended in the next few hours. You can proceed renewing by validating the order accessible through the following link: Renew now (http://5d932.gardeniapacifica.pt/)
Cordialy,
Your OVH Customer Service
show less
Spoofing domaine for phishing OVH domain upgrade.
Content :
Dear Customer, This notification is ...
show moreSpoofing domaine for phishing OVH domain upgrade.
Content :
Dear Customer, This notification is automatically sent to inform you that your domaine name xxx expires today. In case of non-renewal your domain will be suspended in the next few hours. You can proceed renewing by validating the order accessible through the following link: Renew now (http://5d932.gardeniapacifica.pt/)
Cordialy,
Your OVH Customer Service
show less
Use an auto-reply address to send a message with a possibly suspicious attached file!
Message :
...
show moreUse an auto-reply address to send a message with a possibly suspicious attached file!
Message :
[email protected][email protected]
www.koitabashi-k.co.jp
Attached file : Koitabashi-k.co_Z89144820627119UJ.xsl
Herader :
Received-SPF: pass (xxx: domain of santacasasaojoao.com.br designates 177.70.124.113 as permitted sender)
client-ip=177.70.124.113
Received: from smtp-07.idc2.mandic.com.br ([177.70.124.113]) by xxx with
xxx; Fri, 8 Jul 2022 16:47:35 -0400
Received: by smtp-07.smtp.mandic.prv (Postfix, from userid 490)
id 7650C42B8E8; Fri, 8 Jul 2022 17:47:32 -0300 (-03)
Received: from [127.0.0.1] (unknown [189.234.191.251])
by smtp-07.smtp.mandic.prv (Postfix) with ESMTPSA id 02E7E100F3F4
show less
Another SQL injection attempt, 250 attempts in 3 hours. By filling out a contact form that doesn't e ...
show moreAnother SQL injection attempt, 250 attempts in 3 hours. By filling out a contact form that doesn't even connect to a database anyway!
For instance : (DTzm' AND 2165 IN (SELECT (CHAR(113)+CHAR(112)+CHAR(107)+CHAR(107)+CHAR(113)+(SELECT (CASE WHEN (2165=2165) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(98)+CHAR(107)+CHAR(112)+CHAR(113))) AND 'URpu'='URpu
Or : (DTzm');SELECT PG_SLEEP(5)
show less