3rd strike: spamming using sharepoint.com links to hide behind: hookupshub.com

https://skycollegeus-my.sharepoint.com/:w:/g/personal/erinbrown2_skycollegeus_onmicrosoft_com/EWPzum6lPlBPkRyzKH8tZH8BdEeJ-h0VTI1tMGE0AhZgGw?e=4%3alBei7j&at=9

>>> http://track.kcheck43.com/click?pid=502&offer_id=516&sub1=mp

302 Redirect

https://convertable.io/smartlink/8fcd4d88-c5f0-4151-b07e-8613b1b5e6c2?source=502&uid=5f7ab36e96c6540001d26cec&pub=1041

302 Redirect

https://x.pathtrk.com/c9b1b451-4697-4187-b6d5-64c75624f57b?pub=1041&source=502&uid=5f7ab36e96c6540001d26cec&cs_id=64393edc-c8b3-4c58-9f9f-bbd344376859

302 Redirect

https://www.hookupshub.com/x/hye354y/?cep=nr5dW9_tlB2vhnLHRMUj3P-yxD9blDqPVLSX5omAdpWq2gvd2bLn1nsMPmimWX—tl2unILct62x9s4crKfQz1Gy68B8iyXRwoXo_NKYoLvRYuD8t8hPMATkpoOMmJT3bkkOXzlylV7ZIARr73CPDLXqNK4iIiYu2Vh_o3M9pxjjzc2ukGf3A76iZGyyX6Nsl44Lr6lT5S-EyB5RRZx83SB7c5mgBjAjjSu46dvYcPpQhRkGYhXpks5wiIxWEij1WH7ik0_5tE6nY91QAHWZzJsAqwQQ_1la2IDIxHbhRIKi4JiJnkYj7CULtZ1K90YRp3NRE8rgCaN8f7Qw7-9FcJfoqYfr5Nuvs2AThtQGlBsM5k3uGrWlQ0MRYw4g5dFxzWpsPPAITTtb1HYNhc6157wXDZ5jqYkg71veIdgyhtypVzJqncDYkg5ceANiXJr3JhtEBdDlROUW5rjpJh1cIKE0DRNfdKVqkA3FWZDwBis&lptoken=162d012e8729865647a7&pub=1041&source=502&uid=5f7ab36e96c6540001d26cec&cs_id=64393edc-c8b3-4c58-9f9f-bbd344376859

track.kcheck43.com. 13640 IN CNAME bilbono.g2afse.com.
bilbono.g2afse.com. 3599 IN CNAME bilbono.affise.com.
bilbono.affise.com. 299 IN A 212.32.254.138

convertable.io. 59 IN A 52.3.146.214
convertable.io. 59 IN A 52.201.128.231

x.pathtrk.com. 299 IN CNAME cayield-jostiny.com.
cayield-jostiny.com. 59 IN A 13.56.31.93

www.hookupshub.com. 174 IN A 104.18.56.244
www.hookupshub.com. 174 IN A 104.18.57.244
www.hookupshub.com. 174 IN A 172.67.159.246

_____________________________

Was:
[13.107.136.9] https://lu9-my.sharepoint.com/:u:/g/personal/hakzuj_5tb_in/EQpd2YvKMshGvdn-bICF_zYBU1ARRymleM59A4u54tAkCg?e=4%3aIAmcGt&at=9

[13.107.136.9] https://lu9-my.sharepoint.com/:u:/g/personal/meosav_5tb_in/EWPKWNt4XBpNgOfOoobCNHkBHdYmhbBOGWpya_EciUcAOg?e=4%3af8NDY2&at=9

[13.107.136.9] https://studentmtsac-my.sharepoint.com/:w:/g/personal/rmarshal_student_mtsac_edu/EZyjbUnYtDZGocXVWmnmEvgBfVDqQKspvsh3LHBuPT4BWw?e=4%3aLb3TyY&at=9

[13.107.136.9] https://mailccsf-my.sharepoint.com/:w:/g/personal/pwallac5_mail_ccsf_edu/EeKD5sZ7CRZLi9GEk1UpYs4B49Nw4eDPPmarvl5QWsmE3g?e=4%3aXRK1An&at=9

[13.107.136.9] https://lu9-my.sharepoint.com/:u:/g/personal/gijnil_5tb_in/EcXSlDzXKkVAr6RqMWsBLmYBTitGqOoZqOzNAvAHSeJd1w?e=4%3ambw7gv&at=9

Received: from APC01-HK2-obe.outbound.protection.outlook.com (mail-eopbgr1300122.outbound.protection.outlook.com [40.107.130.122])
(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
(No client certificate requested)
by xxxxx; Mon, 14 Sep 2020 22:14:20 -0400 (EDT)
Subject: Lissa Huynh shared «WhatsApp Chat-Now» with you.
Cc: Lissa Huynh <gijnil@5tb.in>
From: Lissa Huynh <no-reply@sharepointonline.com>
MIME-Version: 1.0
Content-Type: multipart/related; boundary=»=-x+x==»;
type=»text/html»

Lissa Huynh shared a file with you

Here’s the document that Lissa Huynh shared with you.
icon WhatsApp Chat-Now
permission globe icon This link will work for anyone.
Open

Добавить комментарий

Ваш адрес email не будет опубликован. Обязательные поля помечены *