2 ms·
Same here, the "web reputation" is low according to SenderBase. See http://www.senderbase.org/lookup/?search_string=www.gabrielweinberg.com http://www.senderba
by itazula 12y ago
Same here, the "web reputation" is low according to SenderBase. See http://www.senderbase.org/lookup/?search_string=www.gabrielweinberg.com http://www.senderbase.org/lookup/?search_string=www.gabrielw...
"Fwd/Rev DNS Match" is said by SenderBase to be "Unknown" (this is odd). Checking on my laptop:
$ dig +short www.gabrielweinberg.com
gabrielweinberg.com.
96.227.124.38
$ dig +short -x 96.227.124.38
blink.duckduckgo.com.
It is on the Verizon FiOS network, which has a number of poor reputation hosts:
http://www.senderbase.org/lookup/org/?search_string=Verizon%20FiOS http://www.senderbase.org/lookup/org/?search_string=Verizon%...
The site appears within the CBL too, which gives some details: IP Address 96.227.124.38 is listed in the CBL. It appears to be infected with a spam sending trojan, proxy or some other form of botnet.
It was last detected at 2014-09-03 06:00 GMT (+/- 30 minutes), approximately 4 hours ago.
This IP address is infected with, or is NATting for a machine infected with "Gameover Zeus" or "GOZ" - previously it has been referred to as "ZeusV3" or "p2pzeus". GOZ is a version of the ZeuS malware that uses peer-to-peer (P2P) command and control mechanisms.