perjantai 3. toukokuuta 2019

".icu" - päätteisistä domannimistä tunkee spämmiä

Edellisessä vastaavassa kirjessä myytiin häikäisynpoistolaseja ja tässä droneja. Muuten kuvio on sama. Domannimi on toinen "traffictrouble.icu"mutta näitä "ilmaisnimiä" "ilmaispalvelimille" perustetaan tällä hetkellä enemmän, kun tarpeeksi. Kaikkien rekisteröijjätiedot on peiteetty, koska rikolliset eivät ymmärrettävästi halua paljastua. Tämä firma on kotoisin myös Panamasta, tuolta spämmereiden luvatusta maasta.

Linkit vievät tietokantaosoitteisiin, joiden kautta koneellesi saattaa saapua aivan mitä tahansa - myös virus. Domannimitiedustelu ei anna tietoja firmasta. Google ei löydä domannimen takaa mitään. Nämä ovat hyvin varmoja osoituksia siitä, että kyseisen "olemattoman yrityksen" kanssa ei kannata olla missään tekmisissä, eikä tällaisen, tai vastaavankaan kirjeen linkkeihin, tule missään tapauksessa koskea. EI edes tuohon "unsubscribe" linkkiin. Senkin perässä saattaa tulla koneelle vaarallista materiaalia.

Tämä spämmäysryöppy tuhoaa täysin .ICU doman-päätteen merkityksen luotettavana osoitteena. Sen voisi plokata pois huoletta postivirrasta. Itse pidän sen muka ainoastaan nähdäkseni, tehdäänkö asialle mitään "abuse@nic.icu":lle esittämistäni lukuisista pyynnöitäni huolimatta. He ovat vastuussa pääteen liikenteestä.

Lisää spämmääviä (spammers) .ICU domannimiä jotka ovat kaikki vaarallisia. Luultavasti saman toimijan generoimia "keksittyjä" osoitteita. Olen kasvattanut listaa sitä mukaan, kun uusia saapuu. 
Tämä on luultavasti yksi laajimmista spämmikampajoista ja aina joku raukka menee halpaan.

census@juniorcarpet.icu
applaud@revealagency.icu
electron@lessonsupply.icu
lunch@pleasevisual.icu
tycoon@middleharass.icu
admire@readerreturn.icu
bishop@coerceunique.icu
treaty@honestrocket.icu
health@invitesticky.icu
referee@includeveteran.icu
coat@traffictrouble.icu
office@freightinitial.icu

cyrano@stresstreaty.icu
ideate@cheesevelvet.icu
accent@pepperletter.icu
wander@occupyrecord.icu
treaty@refundendure.icu
meadow@figureshiver.icu
output@mediumbanana.icu
deserve@tycoonnuance.icu
dominate@loungeapathy.icu
current@stickycattle.icu
land@expandpastel.icu

dominate@impactbarrel.icu
yvor@cuterib.icu
aganus@fibrebus.icu
sulphur@fingercup.icu
pleasure@furgun.icu
crossing@deathfan.icu
yvor@cuterib.icu
aganus@fibrebus.icu
sulphur@fingercup.icu
pleasure@furgun.icu

scheme@ribban.icu
bad@pleasenap.icu
crossing@takefly.icu
bajada@stresssun.icu
yvor@solveget.icu
analyst@decadebanish.icu
culture@weaponspider.icu
center@usefulchoose.icu

crevice@insertstress.icu
loz@threatslogan.icu
makkah@knotreal.icu
horse@gemskin.icu
snatch@coremeal.icu
stretch@airliftsz.icu
broccoli@wrongfull.icu
clique@toughjoy.icu
counter@tiecage.icu.

SOURCE CODE OF ONE SPAM:


From - Fri May 03 13:11:44 2019
X-Mozilla-Status: 1001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                                 
Received: via tmail-2007f.2015-sau for fp6592.200; Thu, 2 May 2019 19:23:54 +0300 (EEST)
Received: from fe22.mail.saunalahti.fi (fe22.mail.saunalahti.fi [62.142.5.27])
 by be408.mail.saunalahti.fi (Postfix) with ESMTP id 75DAA60614
 for <fp6592@be408.mail.saunalahti.fi>; Thu,  2 May 2019 19:23:54 +0300 (EEST)
X-Client-Addr: 185.130.56.214
Received: from traffictrouble.icu (unknown [185.130.56.214])
 by fe22.mail.saunalahti.fi (Postfix) with ESMTP id 5BC9720008
 for <hannu.kuukkanen@elisanet.fi>; Thu,  2 May 2019 19:23:47 +0300 (EEST)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=mail; d=traffictrouble.icu;
 h=From:Date:MIME-Version:Subject:To:Message-ID:Content-Type; i=coat@traffictrouble.icu;
 bh=He/x3HjkDRS6PYDTjixq+GY8eaQ=;
 b=ZxElYTAcsJfrW/l/HxGE+caHY63DOZy7oXAYdNmYr0+V3mwVavWahivMg3ssyyPEBLIv7hcHdGPR
   jFrDgaFeHkI+UdCtqMO8FSidZV2P34zFMYoGB9XtCFngv8lzcGDmC5c/OZwuhGp56upFvjQ27ZXR
   dV6jdZPZgxpEzQt9ySw=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=mail; d=traffictrouble.icu;
 b=L2lfO3K7pa7YU7MZ5Z6ygd4kxVBrHOtgm5VCBWdB4Kj6jLNPqzkwt8PUU5hdQg0SCM8P7YYA0aN7
   gDHtX2yQfx8Od9y8lG6nns3JVD65RX3jF4iZit96+bhptqGlxxUaR3pQnz9Y51oU6bWJHCpC5IZn
   WfmcMEOFnKMJLd+ElwQ=;
From: "Drone-X Pro" <coat@traffictrouble.icu>
Date: Thu, 02 May 2019 11:07:49 -0500
MIME-Version: 1.0
Subject: Best affordable drone to hit the market
To: <hannu.kuukkanen@elisanet.fi>
Message-ID: <S5ngrRCbjCE9TsL-Ff1ZSS9ybw3fct67pvCOUwPD1Lo.uEmgCMOJq4AijmlKgrtAHDEx8ZqlYr4nHFfaeKGpoHc@traffictrouble.icu>
Content-Type: multipart/alternative;
 boundary="------------637535878449048673118732"

This is a multi-part message in MIME format.
--------------637535878449048673118732
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Best affordable drone to hit the market
<http://www.traffictrouble.icu/yiurm/ekzr27015kdqm/z8G2lWBZlDJpRgAqctXvDqgNdUxvYlq8pw8LiXePm-8/nVjF6_Ap5tTS36PX9vyYT8jyBpuv_AYuKBXIIRtNIjQKGVi6bP1rgRwZYw2VRmgngstpAmygfd81M_y5xkaC1AahfEFZOduRYxaxaBNXTQQjSUyRNN2dhlZo76KMtdVB>



you can always unsubscribe from out storehere
<http://www.traffictrouble.icu/Byhbdsmm/BVdtMK67oZlhd2NNRyUSjQQTXNBaxaxYRudOZFEfhaA1Cakx5y_M18dfgymAptsgngmRV2wYZwRgr1Pb6iVGKQjINtRIIXBKuYA_vupByj8TYyv9XP63STt5pA_6FjVn.8-mPeXiL8wp8qlYvxUdNgqDvXtcqAgRpJDlZBWl2G8z>




<http://www.traffictrouble.icu/yiurm/ekzr27015kdqm/z8G2lWBZlDJpRgAqctXvDqgNdUxvYlq8pw8LiXePm-8/nVjF6_Ap5tTS36PX9vyYT8jyBpuv_AYuKBXIIRtNIjQKGVi6bP1rgRwZYw2VRmgngstpAmygfd81M_y5xkaC1AahfEFZOduRYxaxaBNXTQQjSUyRNN2dhlZo76KMtdVB>
<http://www.traffictrouble.icu/yiurm/ekzr27015kdqm/z8G2lWBZlDJpRgAqctXvDqgNdUxvYlq8pw8LiXePm-8/nVjF6_Ap5tTS36PX9vyYT8jyBpuv_AYuKBXIIRtNIjQKGVi6bP1rgRwZYw2VRmgngstpAmygfd81M_y5xkaC1AahfEFZOduRYxaxaBNXTQQjSUyRNN2dhlZo76KMtdVB>




<http://www.traffictrouble.icu/Byhbdsmm/BVdtMK67oZlhd2NNRyUSjQQTXNBaxaxYRudOZFEfhaA1Cakx5y_M18dfgymAptsgngmRV2wYZwRgr1Pb6iVGKQjINtRIIXBKuYA_vupByj8TYyv9XP63STt5pA_6FjVn.8-mPeXiL8wp8qlYvxUdNgqDvXtcqAgRpJDlZBWl2G8z>



--------------637535878449048673118732
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<html>
<head>

<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body>

<p style="text-align: center;">&nbsp;</p>





<h1 font-size:="" open="" style="text-align: center;" text-align:=""><a href="http://www.traffictrouble.icu/yiurm/ekzr27015kdqm/z8G2lWBZlDJpRgAqctXvDqgNdUxvYlq8pw8LiXePm-8/nVjF6_Ap5tTS36PX9vyYT8jyBpuv_AYuKBXIIRtNIjQKGVi6bP1rgRwZYw2VRmgngstpAmygfd81M_y5xkaC1AahfEFZOduRYxaxaBNXTQQjSUyRNN2dhlZo76KMtdVB"><span style="font-size: 36px;">Best affordable drone to hit the market</span></a></h1>





<p style="text-align: center;">you can always unsubscribe from out store&nbsp;<a href="http://www.traffictrouble.icu/Byhbdsmm/BVdtMK67oZlhd2NNRyUSjQQTXNBaxaxYRudOZFEfhaA1Cakx5y_M18dfgymAptsgngmRV2wYZwRgr1Pb6iVGKQjINtRIIXBKuYA_vupByj8TYyv9XP63STt5pA_6FjVn.8-mPeXiL8wp8qlYvxUdNgqDvXtcqAgRpJDlZBWl2G8z">here</a></p>





<p style="text-align: center;"><font style="color: rgb(0, 0, 0); font-family: Arial; font-size: large;"><span style="border-style: initial; border-color: initial; border-image: initial; font-style: inherit; font-variant: inherit; font-weight: inherit; font-stretch: inherit; line-height: inherit; width: auto;"><a href="http://www.traffictrouble.icu/yiurm/ekzr27015kdqm/z8G2lWBZlDJpRgAqctXvDqgNdUxvYlq8pw8LiXePm-8/nVjF6_Ap5tTS36PX9vyYT8jyBpuv_AYuKBXIIRtNIjQKGVi6bP1rgRwZYw2VRmgngstpAmygfd81M_y5xkaC1AahfEFZOduRYxaxaBNXTQQjSUyRNN2dhlZo76KMtdVB"><img alt="1" src="http://www.traffictrouble.icu/Zaljif/fqowmh20648udzows/.jpg" style="box-sizing: content-box; margin: 0px; padding: 0px; border: 0px; font-style: inherit; font-variant: inherit; font-weight: inherit; font-stretch: inherit; font-size: 0px; line-height: inherit; font-family: inherit; vertical-align: middle; color: transparent; max-width: 100%;" /><img alt="2" src="http://www.traffictrouble.icu/Zaljif/fqowmh20649udzows/.jpg" sty
 le="box-sizing: content-box; margin: 0px; padding: 0px; border: 0px; font-style: inherit; font-variant: inherit; font-weight: inherit; font-stretch: inherit; font-size: 0px; line-height: inherit; font-family: inherit; vertical-align: middle; color: transparent; max-width: 100%;" /><img alt="3" src="http://www.traffictrouble.icu/Zaljif/fqowmh20646udzows/.jpg" style="box-sizing: content-box; margin: 0px; padding: 0px; border: 0px; font-style: inherit; font-variant: inherit; font-weight: inherit; font-stretch: inherit; font-size: 0px; line-height: inherit; font-family: inherit; vertical-align: middle; color: transparent; max-width: 100%; width: auto;" /><img alt="4" data-spm-anchor-id="2114.10010108.1000023.i2.242b28ad7LXoju" src="http://www.traffictrouble.icu/Zaljif/fqowmh20645udzows/.jpg" style="box-sizing: content-box; margin: 0px; padding: 0px; border: 0px; font-style: inherit; font-variant: inherit; font-weight: inherit; font-stretch: inherit; font-size: 0px; line-height: 
 inherit; font-family: inherit; vertical-align: middle; color: transparent; max-width: 100%; width: auto;" /><img alt="5" src="http://www.traffictrouble.icu/Zaljif/fqowmh20647udzows/.jpg" style="box-sizing: content-box; margin: 0px; padding: 0px; border: 0px; font-style: inherit; font-variant: inherit; font-weight: inherit; font-stretch: inherit; font-size: 0px; line-height: inherit; font-family: inherit; vertical-align: middle; color: transparent; max-width: 100%; width: auto;" /><img alt="6" src="http://www.traffictrouble.icu/Zaljif/fqowmh20650udzows/.jpg" style="box-sizing: content-box; margin: 0px; padding: 0px; border: 0px; font-style: inherit; font-variant: inherit; font-weight: inherit; font-stretch: inherit; font-size: 0px; line-height: inherit; font-family: inherit; vertical-align: middle; color: transparent; max-width: 100%; width: auto;" /><img alt="7" src="http://www.traffictrouble.icu/Zaljif/fqowmh20641udzows/.jpg" style="box-sizing: content-box; margin: 0px; pad
 ding: 0px; border: 0px; font-style: inherit; font-variant: inherit; font-weight: inherit; font-stretch: inherit; font-size: 0px; line-height: inherit; font-family: inherit; vertical-align: middle; color: transparent; max-width: 100%; width: auto;" /><img alt="8" src="http://www.traffictrouble.icu/Zaljif/fqowmh20644udzows/.jpg" style="box-sizing: content-box; margin: 0px; padding: 0px; border: 0px; font-style: inherit; font-variant: inherit; font-weight: inherit; font-stretch: inherit; font-size: 0px; line-height: inherit; font-family: inherit; vertical-align: middle; color: transparent; max-width: 100%; width: auto;" /></a></span></font><br style="color: rgb(0, 0, 0); font-family: Arial; font-size: large; box-sizing: content-box;" />


<br style="color: rgb(0, 0, 0); font-family: Arial; font-size: large; box-sizing: content-box;" />


<font style="color: rgb(0, 0, 0); font-family: Arial; font-size: large;"><span style="border-style: initial; border-color: initial; border-image: initial; font-style: inherit; font-variant: inherit; font-weight: inherit; font-stretch: inherit; line-height: inherit; width: auto;"><a href="http://www.traffictrouble.icu/yiurm/ekzr27015kdqm/z8G2lWBZlDJpRgAqctXvDqgNdUxvYlq8pw8LiXePm-8/nVjF6_Ap5tTS36PX9vyYT8jyBpuv_AYuKBXIIRtNIjQKGVi6bP1rgRwZYw2VRmgngstpAmygfd81M_y5xkaC1AahfEFZOduRYxaxaBNXTQQjSUyRNN2dhlZo76KMtdVB"><img alt="10" src="http://www.traffictrouble.icu/Zaljif/fqowmh20643udzows/.jpg" style="box-sizing: content-box; margin: 0px; padding: 0px; border: 0px; font-style: inherit; font-variant: inherit; font-weight: inherit; font-stretch: inherit; font-size: 0px; line-height: inherit; font-family: inherit; vertical-align: middle; color: transparent; max-width: 100%;" /><img alt="11" data-spm-anchor-id="2114.10010108.1000023.i1.242b28ad7LXoju" src="http://www.traffictrouble.icu/Za
 ljif/fqowmh20642udzows/.jpg" style="box-sizing: content-box; margin: 0px; padding: 0px; border: 0px; font-style: inherit; font-variant: inherit; font-weight: inherit; font-stretch: inherit; font-size: 0px; line-height: inherit; font-family: inherit; vertical-align: middle; color: transparent; max-width: 100%;" /></a></span></font></p>





<p style="text-align: center;"><a href="http://www.traffictrouble.icu/Byhbdsmm/dtMK6Zlhd2NNRyUSjQQTXNBaxaxYRudOZFEfhaA1Cakx5y_M18dfgymAptsgngmRV2wYZwRgr1Pb6iVGKQjINtRIIXBKuYA_vupByj8TYyv9XP63STt5pA_6FjVn.8-mPeXiL8wp8qlYvxUdNgqDvXtcqAgRpJDlZBWl2G8z" style="text-align: center;"><img alt="" src="http://www.traffictrouble.icu/Zaljif/fqowmh7613udzows/.jpeg" style="width: 650px; height: 102px;" /></a></p><br />
<img src="http://www.traffictrouble.icu/c1ndwbd77/G2lWBZlDJpRgAqctXvDqgxvYlq8pw8LiXePm-8/nVjF6_Ap5tTS36PX9vyYT8jyBpuv_AYuKBXIIRtNIjQKGVi6bP1rgRwZYw2VRmgngstpAmygfd81M_y5xkaC1AahfEFZOduRYxaxaBNXTQQjSUyRNN2dhlZo76KMtdVB" >




</body>
</html>

--------------637535878449048673118732--

1 kommentti:

  1. This is a fabulous post I seen because of offer it. It is really what I expected to see trust in future you will continue in sharing such a mind boggling post

    Central Government Health Scheme (CGHS) Patna

    VastaaPoista

Vaarallinen WEB