Fake Emails – Reply To Address On rambler.ru Domain

We have received a lot of spam e-mails today where the reply to address is on the rambler.ru domain.  This domain appears to be known for spam ( See here ) back in 2016 this domain was hacked and 98 million accounts were stolen ( see here )

This spam maybe sent via the Necurs botnet

Rambler.ru is one of the largest websites in the world, and one of the most visited in Russia.

Some examples as follows :-

Dear XXX, my name is Lera and i’m from Russia, but moved to the USA three years ago. I came across your photos on one of the social media platforms, and remembered you because you seem a type of guy I want 🙂 You are hot, smart and sexy 🙂 and I would like to get to know you! Hope you have the same feeling. If you would like to know me more, this is my email [email protected] write to me and I will send some of my photos. Hugs, Lera


You seem like my type and I would like to know you more! Write me if you are interested, here is my email [email protected] and, if you want, I will send some of my photos. Hugs, Maria


Example Reply To Addresses

We suggest you block the entire domain, unless your expecting e-mail from this domain.   Please let us know the e-mail addresses of any you receive on that domain and we will update this list.

[email protected][email protected]
[email protected][email protected]
nelakarina1[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]
[email protected][email protected]




Duncan Newell

Duncan is a technology professional with over 20 years experience of working in various IT roles. He has a interest in cyber security, and has a wide range of other skills in radio, electronics and telecommunications.

8 thoughts on “Fake Emails – Reply To Address On rambler.ru Domain

  • January 17, 2018 at 6:52 am
    Permalink

    I would like to report annoying spam emails.
    I have started to receive 50 to 100 spam emails a day in the same style.
    1 type; Dear XXX, my name is Lera and i’m from Russia, but moved to the USA three years ago. I came across your photos…..
    The other type;You seem like my type and I would like to know you more! Write me if you are interested, here is my email [email protected] and, if you want, I will send some of my photos.
    email addresses are all @rambler.ru
    ellatfilse, gabjbheike, vanesagbmaria, simonamonikat3c, sabinag3maria, vanesagbmaria, zuzanadmbar, lucieruthnbn,laurab5ym, elipetrayk, gav6theike, denisabaru4, elisa4inge, baringridagho, anetabirgit5af, denisavafursula, lucieerikas99, elipetrayk, luciegiselaufde, annaheikeay, elenarzpilse, viktoriebu0, eleninge51r, ellairxt6t, evabrspne, sabinag3maria, venlsajutta, aulrikemui, venlsajutta, route325, sabinab4doris, anetaingepj, ro3vruth, evabrspne, gabrielake0i, venhelgarjxq, julieandreakork, monikaeiq, monikajuttaa61g, nikolahdute, vanesakbvhingrid, monikatr9g, marielgsiha, denisaulrike74, monikax5s5inge, gabhelgavj, ella4r8m, evassyomonika, [email protected]

    Reply
  • January 17, 2018 at 8:36 am
    Permalink

    I’ve been getting a lot of these as well, probably thanks to some poorly designed loop by a technically incompetent smapper.

    Reply
  • March 29, 2018 at 10:35 am
    Permalink

    Here’s a new one to add to the list…

    [email protected]

    And this one goes by the name “Svetlana” who claims to have seen my photos on Badoo ??? so I’ve done some research on it, and I quote that is a dangerous dating website, and guess what? it’s Russian…BEWARE !!

    Reply

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: