Search found 11 matches

by Fred Nurk
Wed Jun 27, 2018 3:19 am
Forum: Reputation discussions
Topic: My Canadian Pharmacy
Replies: 328
Views: 73720

Re: My Canadian Pharmacy

Sender address: sale_support2jizqu@rxshopsale.com

IP address: 170.80.205.251

Link: http://ouosiblmq.supersupportx.su/

Another:

Sender address: 1sale_online_36@pharmacy45.can

IP address: 103.81.37.147

Link: http://umymibjic.successlifey.su/
by Fred Nurk
Wed May 30, 2018 11:00 am
Forum: Reputation discussions
Topic: Malicious Morocco Spambot on OVH Canada
Replies: 12
Views: 3839

Re: Malicious Morocco Spambot on OVH Canada

Appears to have started up again - several e-mails in the last few hours, all headed "Home Warranty". All contain a redirection link which leads to http://zffzz.yzscwdbdxe.oyfhf.site/?sov=2762575916&hid=hzxjjxjxtnpzplpljp&&email=email&cntrl=00000&pid=824&redid=69559&gsid=487&campaign_id=165&p_id=824...
by Fred Nurk
Thu May 24, 2018 5:18 am
Forum: General discussion
Topic: What Browsers Use The Least and Most RAM Memory?
Replies: 6
Views: 16070

Re: What Browsers Use The Least and Most RAM Memory?

For me, IE isn't any sort of option - dreadfully slow to start, and load pages - I only ever use it as a test if I appear to be having an issue with another browser, just to find out whether it's the site or the browser that's at fault. Last-case scenario at best. Firefox is good, but uses a lot of ...
by Fred Nurk
Wed May 23, 2018 5:40 am
Forum: Reputation discussions
Topic: Famous Parts - daimlerhldg.com / galaauto.com
Replies: 0
Views: 1546

Famous Parts - daimlerhldg.com / galaauto.com

Been getting spam from these planks for quite some time. They call themselves Daimler Germany , but I doubt they have any actual connection to Daimler. They send an e-mail offering to manufacture your company's automotive parts. The e-mails are never actually sent from a domain associated with the w...
by Fred Nurk
Wed May 23, 2018 3:30 am
Forum: Reputation discussions
Topic: "Canadian Pharmacy" domains
Replies: 479
Views: 75924

Re:

Had one land in my Junk folder half-an-hour ago: link leads to thesecurecompany.su
by Fred Nurk
Tue May 22, 2018 12:38 am
Forum: Reputation discussions
Topic: counterfeit
Replies: 191
Views: 78996

Re: counterfeit

Another - same idiot. This time, fake Coach bags.

IP address: 150.109.43.160 (tencent.com)

Sender domain: wouldvsuugg.club (registered via GoDaddy).

Links redirect to: http://www.coachs.vip/
by Fred Nurk
Mon May 14, 2018 5:12 am
Forum: Reputation discussions
Topic: Malicious Morocco Spambot on OVH Canada
Replies: 12
Views: 3839

Re: Malicious Morocco Spambot on OVH Canada

the samples seem highly under-reported, I suggest reporting and/or forwarding--as attachments--the emails to blocklists. I've been reporting them via SpamCop, clearly to no effect - any suggestions on which blocklists I should direct them to would be greatly appreciated... After a break of a few da...
by Fred Nurk
Tue May 08, 2018 12:01 am
Forum: Reputation discussions
Topic: Malicious Morocco Spambot on OVH Canada
Replies: 12
Views: 3839

Re: Malicious Morocco Spambot on OVH Canada

Happily, creeddeskenth.xyz is dead for the time being - Name.com have placed it on 'clienthold', and it now doesn't lead anywhere. Meanwhile, the spammer is now sending directly via IP address 79.137.70.43. The phishing link leads to a waybitz.com page, which redirects to a ifehp.today page which tr...
by Fred Nurk
Sun May 06, 2018 10:59 pm
Forum: Reputation discussions
Topic: Malicious Morocco Spambot on OVH Canada
Replies: 12
Views: 3839

Re: Malicious Morocco Spambot on OVH Canada

Another this morning - sent from savemalletpuerto.xyz, IP address 54.38.61.17
by Fred Nurk
Fri May 04, 2018 12:04 am
Forum: Reputation discussions
Topic: Malicious Morocco Spambot on OVH Canada
Replies: 12
Views: 3839

Re: counterfeit

Phishing e-mails - offering Cannabis Oil gummies or advice about heart attack symptoms. Sender domains include: creeddeskenth.xyz loyalpermissiondude.xyz ordercotton.xyz The link in all e-mails leads to a creeddeskenth.xyz page, which redirects to a site that triggers malware warnings. All domains a...