2016-08-26 - BOLETO MALSPAM

ASSOCIATED FILES:

• ZIP archive of today's spreadsheet:  2016-08-26-boleto-malspam-emails.csv.zip   5.7 kB (5,671 bytes)

• 2016-08-26-boleto-malspam-emails.csv   (25,794 bytes)

• ZIP archive of today's emails:  2016-08-26-boleto-malspam-emails.zip   13.1 kB (13,084 bytes)

• 2016-08-26-0248-UTC-boleto-malspam.eml   (1,828 bytes)
• 2016-08-26-0327-UTC-boleto-malspam.eml   (1,822 bytes)
• 2016-08-26-0354-UTC-boleto-malspam.eml   (1,846 bytes)
• 2016-08-26-0447-UTC-boleto-malspam.eml   (1,803 bytes)
• 2016-08-26-0451-UTC-boleto-malspam.eml   (1,799 bytes)
• 2016-08-26-0513-UTC-boleto-malspam.eml   (1,835 bytes)
• 2016-08-26-0734-UTC-boleto-malspam.eml   (1,830 bytes)
• 2016-08-26-0753-UTC-boleto-malspam.eml   (1,826 bytes)
• 2016-08-26-1834-UTC-boleto-malspam.eml   (1,788 bytes)
• 2016-08-26-1942-UTC-boleto-malspam.eml   (1,789 bytes)

 

MY PREVIOUS DOCUMENTATION ON THIS CAMPAIGN:

• 2016-08-25 - Boleto malspam
• 2016-08-24 - Boleto malspam
• 2016-08-23 - Boleto malspam
• 2016-08-22 - Boleto malspam
• 2016-08-19 - Boleto malspam
• 2016-08-18 - Boleto malspam
• 2016-08-17 - Boleto malspam
• 2016-08-16 - Boleto malspam
• 2016-08-15 - Boleto malspam
• 2016-08-13 - Boleto malspam
• 2016-07-26 - Malspam hunt (one email at 2016-07-26 18:40 UTC)
• 2016-07-25 - Boleto malspam - Subject: Boleto de Cobranca - FIX - URGENTE

 

EMAILS

Shown above:  Email data from the spreadsheet (part 1 of 2).

 

Shown above:  Email data from the spreadsheet (part 2 of 2).

 

Shown above:  Example of the emails.

DETAILS

EXAMPLES OF SENDING EMAIL ADDRESSES:

• cobranca@entregaregistrada.top
• financeiro@louislittadvocacia.top
• financeiro@maxcobrancas.xyz
• financeiro@paybackcobrancas.top

 

EXAMPLES OF SUBJECT LINES:

• Boleto Bancario via eletronica - LLITT - URGENTE
• Boleto Bancario via eletronica - MAXCOB - URGENTE
• Boleto Bancario via eletronica - PAYBACK - URGENTE
• Boleto de Cobranca - ENTREGA - URGENTE

 

DOMAINS FROM LINKS IN THE EMAILS:

• deliverybill.top
• entregaregistrada.top
• envioanexado.top
• envioregistrado.biz
• sendbolfast.top
• senderbol.top

 

FINAL NOTES

Once again, here are the associated files:

• ZIP archive of today's spreadsheet:  2016-08-26-boleto-malspam-emails.csv.zip   5.7 kB (5,671 bytes)
• ZIP archive of today's emails:  2016-08-26-boleto-malspam-emails.zip   13.1 kB (13,084 bytes)

ZIP files are password-protected with the standard password.  If you don't know it, look at the "about" page of this website.

Click here to return to the main page.