Community post

https://pastebin.com/S7XrQffX

https://www.ncbi.nlm.nih.gov/pubmed/31022925
[email protected]:lcd51vm
[email protected];34cxl18m
[email protected]:8qyfxbzw
[email protected]:38MpgvTk
[email protected]:kaptiv
[email protected]:51168van
[email protected]:123456
[email protected]:34cxl18m
[email protected]:yl77032
[email protected]:4562109
[email protected]:960608
[email protected]:cwru1007
[email protected]:yl770320
[email protected]:Zms528
[email protected]:71100496
[email protected]:wanglin
[email protected]:LingXiao92
[email protected]:091017
[email protected]:Z87199116
[email protected]:187187

Domain Name: iov.cn
ROID: 20040706s10001s02586636-cn
Domain Status: ok
Registrant ID: hc468698570-cn
Registrant: 中国科学院武汉病毒研究所
Registrant Contact Email: [email protected]
Sponsoring Registrar: 阿里云计算有限公司(万网)
Name Server: dns7.hichina.com
Name Server: dns8.hichina.com
Registration Time: 2004-07-06 13:05:42
Expiration Time: 2027-07-06 13:05:42
DNSSEC: unsigned

https://nmap.online/result/12cac7d82baeed4a3dacddbf9fcf3298fcbd213f/whiovcn1

Starting Nmap 7.80 ( https://nmap.org ) at 2020-04-20 16:04 PDT
Nmap scan report for wh.iov.cn (159.226.251.13)
Host is up (0.18s latency).
rDNS record for 159.226.251.13: mail.cstnet.cn
Not shown: 92 filtered ports
PORT STATE SERVICE
25/tcp open smtp
80/tcp open http
110/tcp open pop3
143/tcp open imap
443/tcp open https
465/tcp open smtps
993/tcp open imaps
995/tcp open pop3s

Nmap done: 1 IP address (1 host up) scanned in 10.35 seconds

Try SMTP port 25 that fits with what the original OP said too.

[email protected]
Characterization of a New Member of Alphacoronavirus with Unique Genomic Features in Rhinolophus Bats.
doi: 10.3390/v11040379.

https://www.ncbi.nlm.nih.gov/pubmed/31022925

http://ddl.escience.cn/

Bottom right, scan the qr code for url and download the app.

I'm able to download files while on the mobile version.
I'm too much of a pussy ass bitch to try these combos on this server

https://mail.cstnet.cn/

RTFM

https://man.openbsd.org/ssh.1

Gates Foundation
May or may not be him...

[email protected] dranthony

The reason I suspect it is him is because this email is in use enough that he got phished a number of times on a number of different dates.

If it isn't him, it is another dr fauci or someone who has done a lot of pretending to be dr fauci.

[email protected] biochem

https://mail.cstnet.cn/coremail/xphone/

Port: 465

Service:ssl/smtp Version:Postfix smtpd

http://ddl.escience.cn/f/rUyx

https://extranet.who.int/rhl//user/login

port 994 is an irc daemon.

Not shown: 65526 filtered ports
PORT STATE SERVICE
25/tcp open smtp
80/tcp open http
110/tcp open pop3
143/tcp open imap
443/tcp open https
465/tcp open smtps
993/tcp open imaps
994/tcp open ircs
995/tcp open pop3s

ssh: connect to host who.int port 22: Connection timed out

and

http://ddl.escience.cn/f/rUyx
;; ANSWER SECTION:
who.int. 86400 IN MX 10 mx10.who.int.
who.int. 86400 IN MX 10 mx5.who.int.
who.int. 86400 IN NS ns1.wpro.who.int.
who.int. 86400 IN NS ext-dns-2.cern.ch.
who.int. 86400 IN NS whqdns3.who.int.
who.int. 86400 IN NS whqdns1.who.int.
who.int. 86400 IN NS whqdns2.who.int.

https://ifs.who.int/adfs/ls/?RedirectToIdentityProvider=http%3A%2F%2Fifs.who.int%2Fadfs%2Fservices%2Ftrust

Laboratory Address: Shenzhen City, Nanshan district, Longyuan Street #8

Person in charge of Laboratory: Liu Jianjun

Names of laboratory-involved disease origin microorganisms:

Rate typhoid (fever) salmonella; 2. Disease-causing large intestine rate bacterium; 3. Slow/chronic virus;

Disease origin microorganism projects carried out by the laboratory:

Rat typhoid (fever) salmonella (mostly carried out [with] live bacterium); 2.
Rat typhoid (fever) salmonella (specimen tests); 3. Rat typhoid (fever) salmonella (non-infectious materials testing); 4. Disease-causing large intestine rate bacterium (mostly carried out [with] live bacterium; 5. Disease-causing large intestine rate bacterium (specimen tests); 6. Disease-causing large intestine rate bacterium (non-infectious materials testing); 7. Slow/chronic virus (virus cultivation); 8. Slow/chronic virus (animal infection tests); 9. Slow/chronic virus (carried out [with] non-cultivated virus materials); 10. Slow/chronic virus (carried out [with] inactive materials); 11. Slow/chronic virus (carried out [with] non infectious materials);

Shenzhen Sanitation and Population Planning Committee [Seal]
September 05, 2012

Tedros

[email protected] YGSept2011

https://extranet.who.int/laboratory_directory/Login.aspx
https://extranet.who.int/infohub/Home/Logon?providerId=2

Okay here's the rundown for those that don't know much.

SSH normally occurs over port 22, this can be changed but most places keep port 22 and implement other security measures. The following ports are open on the wh.iov.cn domain:

443
80
Http/https - the web portal for the email addresses. If you go to wh.iov.cn in your browser it brings you to a email portal login page. (redirects to mail.cstnet.cn)
993/imap
143/imap
110/pop3
465/pop3
993/pop3
These are all email ports/protocols for the backend part of email.

There are no ports open for SSH. Theoretically there could be port knocking but generally that's not common practice as there are more secure ways to limit who can connect to your servers.

https://extranet.who.int/rhl/user/login
https://extranet.who.int/ssffcrapidalert/portal-login
https://vconnect.who.int/auth/login?lang=en
https://ifs.who.int/adfs/ls/?client-request-id=a1386b66-4cae-4561-a359-cb1167e6749d&username=&wa=wsignin1.0&wtrealm=urn%3Afederation%3AMicrosoftOnline&wctx=estsredirect%3D2%26estsrequest%3DrQIIAY2RO2_TUACFc-PUbSMkSqESYwVMSH7cex1f21KHBBtwlFA5UdwkS-T4EVuOc9PUwSS_gLESE5EYAIkhAwMTYmKlLBVjfwBCiAExdSQRC2PPcPSN53GfgTzU7on_hLi1c2IQQM711_SfJrvFnSBWXr-vOcbbztcbg-_pqwXYzELKR6N0Ce6EaTo-0QSBTtMhpTFPgyByfSyXeJcmAs0c4SMA5wAs80TGBGERKaqkliCWEFJ518MKQf0SJ6sq4SSyIkcp9TnZUyRIiAIl4l_krx-Wp2mI1kYn0dz_k98O6CTpjelJumBivTMlOi0P9HKlYmPuoT1LxF4jswwI47r_GJP2g_aRIjkd3B220LPWI-e4axrewGrGY1PSJRdZiVy3baNdNY8orHm4lVWj6mGzGthqFs7Tvj6Vuz3MZcaSudJqHxh21T6hozOGpWN_FHnnBfCzcE1ktK2t4k7udm4_d1kAbzZW677cu3zx6_MXc1H7dvPuu0LubENQZo3jhtt5qpqJ0q5PhojYT2xBkk0rbDYiI5pZ7tAKzXlYGRxgDZ6y4JRlf7DgNwueb-Y-bV_hlIviLSSiVWqJQ3BfhBpCGobdvw2#
that all the login pages ive managed to found but no luck...

wh.iov.cn 110
+OK Welcome to coremail Mail Pop3 Server (cnic.cn-demos[f6ba3aebfcf5b5a2477985a6d89d87d3s])

| http-methods:

|_
Supported Methods: GET HEAD POST OPTIONS
|_
http-server-header: AkamaiGHost
|_
http-title: Did not follow redirect to https://gatesfoundation.org/
443/tcp open ssl/http AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
|
http-favicon: Unknown favicon MD5: 102290DC8B04EA135232C009D005A4F7
| http-methods:
|
Supported Methods: GET HEAD POST OPTIONS
| http-server-header:
| AkamaiGHost
|_
Microsoft-IIS/10.0
|_
http-title: Did not follow redirect to http://www.gatesfoundation.org/
| ssl-cert: Subject: commonName=gatesfoundation.org/organizationName=The Bill & Melinda Gates Foundation/stateOrProvinceName=Washington/countryName=US
| Subject Alternative Name: DNS:gatesfoundation.org, DNS:www.gatesphilanthropypartners.org, DNS:www.gatesfoundation.org.cn, DNS:www.gatesfoundation.org, DNS:gatesphilanthropypartners.org, DNS:iov2.impatientoptimists.org, DNS:visitorcenter.gatesfoundation.org, DNS:hgrant.gatesfoundation.org, DNS:stgwww.impatientoptimists.org, DNS:discoverycenter.gatesfoundation.org, DNS:cert.gatesfoundation.org, DNS:www.impatientoptimists.org.cn (WHY DOT CN?), DNS:stgwww.gatesfoundation.org, DNS:www.impatientoptimists.org, DNS:gfov2.gatesfoundation.org, DNS:failover.gatesfoundation.org

X-Spam-Status: No, score=-5.818 tagged_above=-999 required=3.65
Ring workers bucket more whole soup whole bath mouth
假获 :or 灯灯贩立立编编注注一清清 false success: or Note lamp broadcast advertising legislation check note a clear Mount
污惯惯形惯惯敬潮潮ンンイン模 in addition to the pollution of stereotypes and stereotypes of Tide
A toast to a sleepless night on the tide of Qing fan + a number of a whole fill vibration ditch
The fury of the mouth is scattered and the name of the flow is extinguished
操一连散散散笠摩酸一散操操操操操操操操操操
Fung Yu trick lamp mouth Hao Qing San] Ying Tang
津整 < 灯特笠2下敬敬眠摩く散散津津津
I'm a gentleman.
散口散散一带 - 一正正美
摩摩 - 散泰口口 - 解棚一部数-solution shed a number
Runrun road inquiry paper
Dirty soup Persimmon yiji gongkou
招地掉掉慢慢机优灯招 move to fall out of the slow machine excellent light GUI
模眠摩一口・心持重重敬敬一整情情汚模模模 ONE-ONE-ONE-ONE-ONE-ONE-ONE-ONE-ONE
Love condolences - 乡振振眠眠
械敬 - 湖整整汤汤汤灯械械械械
工警づづ掲掲掲工工工工
Board Picture Association soup tide Heart Day One lamp more vibration is
Wearing side 77 all households for the day and King soup
Thin bridge heart drum Cypress pipe work. ~ Three warm mouth Female Q)
A lamp mouth picture run soup.
Port bridge a Mount (play
Soup wraps the whole heart
A hold of the machine to a slow animal husbandry liquid
Lamp
In the middle of the night, he saluted the Switch. %
Lord.
易数果果模设 < 価説説易 Yi number of fruit and Yi mold set
Department day

http://www.coremail.cn/official_website/

http://archive.is/1dxFa
http://archive.is/1dxFa
http://archive.is/1dxFa
http://archive.is/1dxFa
It’s this thread archived

After the report was received by the municipal health and Safety Commission , the medical and health institutions in the whole city were immediately established.
A case search and review survey was carried out in connection with Huainan Sea Fresh City. 27 cases have been identified.
The remaining cases were stable and controllable, and 2 cases were transferred to the hospital. Clinical table of cases
Now mainly for fever, a small number of patients breathing difficult, chest was double lung infiltration disease. Currently, all cases are
Tracing of close contacts has been isolated treatment investigation and medical observation is in progress, the health of Huanan haixian city
Student surveys and environmental health care are ongoing .
Wu Han city organization with Ji hospital, the provincial Center for Disease Control, the Academy of Sciences Wu Han virus, Wu Han City Hospital for Infectious Diseases and Wu
临市市疾疾控中心等单单的临床学、流行病学、毒毒汉 Han city Disease Control Center and other units of Clinical Medicine, Epidemiology, virus
情情 , 疗疗归归、流治转、流流学查查、实验室步步步步析析析方况况析析认认认认认认 the Department of the disease
Viral pneumonia . To date, no significant human transmission has been detected, and no medical personnel have been infected . Item
An investigation into the detection and infection causes of the pathogen is under way.
Net page link
The cases of pneumonia are closely linked to South China Seafood. After receiving the report, the Municipal Health and Health Commission immediately carried out a retrospective investigation of the cases related to South China Seafood City in Jinshi Medical and Health Institutions. At present, 27 cases have been found. One case was severely ill, and the remaining cases were controllable. Two cases were getting better recently. He is about to be discharged from the hospital recently. The case is mainly near fever. A small number of patients are trapped in breathing, and the slices are double-pulmonary infiltrating lesions. At present, all All cases have been isolated for treatment. The follow-up investigation and medical observation of close contacts are in progress. The hygienic tone and environmental sanitation of South China Seafood City are underway. Han City Organization. Consultation with Linqing Medical, Epidemiology, and Viral Diseases at hospitals, provincial disease control center, Wuhan Institute of Virology of Chinese Academy of Sciences, Kang You Infectious Disease Hospital and Han City Center for Disease Control, etc. The situation of treatment outcome, preliminary detection of epidemiological character straightening laboratory and so on, Xin believes that the above-mentioned cases are diseases of Kite pneumonia. Until Lvqian, there was no obvious person-to-person transmission, no infection of medical personnel was found. Lvqian's detection of pathogens and investigation of the cause of the cause are in progress.

Gates Foundation
https://pastebin.com/awqUq72B
https://archive.is/j6sgo

WHO
https://pastebin.com/raw/UpNjLRaS
https://archive.is/JIJ2b

Wuhan Institute of Virology
https://pastebin.com/PfWKgJgJ
https://archive.is/2RjgI

[email protected] longanizo
same as

ttps://portalsts.gatesfoundation.org/SignIn.aspx

AML983 = Myelodysplastic syndrome???

Symptoms:
Fatigue
Shortness of breath
Unusual paleness (pallor) which occurs due to a low red blood cell count (anemia)
Easy or unusual bruising or bleeding which occurs due to a low blood platelet count (thrombocytopenia)
Pinpoint-sized red spots just beneath your skin caused by bleeding (petechiae)
Frequent infections which occurs due to a low white blood cell count (leukopenia)

https://ifs.who.int/adfs/ls/?RedirectToIdentityProvider=http%3A%2F%2Fifs.who.int%2Fadfs%2Fservices%2Ftrust

https://ifs.who.int/adfs/ls/

Replies (2)

pt 2