Dynamoo's Blog

This fake financial spam has a malicious attachment: From :    Ernestine Harvey Date :    15 December 2015 at 11:34 Subject :    Invo...

This very convincing looking email pretending to be from RS has a malicious attachment. Although the email looks genuine, it is a simple for...

Thanks to a tip to investigate 199.68.199.178 I discovered that the Caphaw network I looked at yesterday is much bigger than I thought. T...

These IPs and domains are associated with this spam run . Some of these servers have been compromised for some time by the looks of things...

It's been a while since I trawled around the activities of the "Amerika" gang , but here is a new set of malicious domains a...

These domains and IPs are associated with this gang , this list supersedes (or complements) the one I made last week . 1.209.108.29 (BOR...

These fake pharma sites and IPs seem related to these malware domains , and follows on from this list last week . 31.184.241.32 (Petersb...

These IPs and domains belong to this gang and this list follows on from the one I made last week . 5.39.14.148 (OVH, France) 5.231.57.2...

These sites and IPs are associated with this gang , and are either currently in use or they have been in use recently. The list has indivi...

These malicious domains and IPs are associated with this prolific gang .  As usual, I've listed IPs with hosts first and then a plain ...

This fake Marriott spam leads to malware on marriott.com.reservation.lookup.viperlair.net : Date:      Wed, 17 Jul 2013 05:12:22 -0800...

These domains and IPs are associated with this gang . This time there appear to be some diet pill sites in the mix, these may be spammy or...

This is a refresh of this list of domains and IPs controlled by what I call the " Amerika " gang, and it follows on from this B...

These domains and IP addresses are connected to this malware spam run and belong to a group I call the " Amerika " gang (becaus...