https://baby-skygirls.blogspot.com/ >>> <script>window.location=’https://privatematchch.com/?utm_source=aDHnxntlbeSB'</script> ________ baby-skygirls.blogspot.com. 3574 IN CNAME blogspot.l.googleusercontent.com. blogspot.l.googleusercontent.com. 274 IN A 172.217.14.97
Автор: blog
Sending porn spam via hacked servers for: club4pick-upsexy-poeple.blogspot.com
http://club4pick-upsexy-poeple.blogspot.com/ >>> <script>window.location=’https://privatematchch.com/?utm_source=aDHnxntlbeSB'</script> ________ club4pick-upsexy-poeple.blogspot.com. 3599 IN CNAME blogspot.l.googleusercontent.com. blogspot.l.googleusercontent.com. 299 IN A 172.217.14.97
Sending porn spam via hacked servers for: ladyesfor-man.blogspot.com
https://ladyesfor-man.blogspot.com/ >>> <script>window.location=’https://privatematchch.com/?utm_source=aDHnxntlbeSB'</script> ________ ladyesfor-man.blogspot.com. 3599 IN CNAME blogspot.l.googleusercontent.com. blogspot.l.googleusercontent.com. 299 IN A 172.217.14.97
Sending porn spam via hacked servers for: datting-love-girls.blogspot.com
https://datting-love-girls.blogspot.com/ >>> https://www.qr-online.pl/go/t47fe280e831 301 Redirect https://privatematchch.com/?utm_source=aDHnxntlbeSB&utm_campaign=pc ________ datting-love-girls.blogspot.com. 3422 IN CNAME blogspot.l.googleusercontent.com. blogspot.l.googleusercontent.com. 299 IN A 172.217.14.97
Sending porn spam via hacked servers for: blog4-near-best-babyes.blogspot.com
http://blog4-near-best-babyes.blogspot.com/ >>> <script>window.location=’https://urseductivegirls.com/?utm_source=Zv7U13WsKpPs9′</script> ________ blog4-near-best-babyes.blogspot.com. 3599 IN CNAME blogspot.l.googleusercontent.com. blogspot.l.googleusercontent.com. 299 IN A 172.217.14.97
Sending porn spam via hacked servers for: lovefor-near-buitifully-girlfriends.blogspot.com
http://lovefor-near-buitifully-girlfriends.blogspot.com/ >>> <script>window.location=’https://urseductivegirls.com/?utm_source=Zv7U13WsKpPs9′</script> ________ lovefor-near-buitifully-girlfriends.blogspot.com. 3532 IN CNAME blogspot.l.googleusercontent.com. blogspot.l.googleusercontent.com. 232 IN A 172.217.14.97
affiliate spam @mymatchgame.com
URL: https://goo.gl/s5GEJk Server IP address is 172.217.0.46 => Location: http://sexxonlineusa.tk/ Server IP address is 195.20.43.74 => Location: http://track.track03.com/click?pid=463&offer_id=724&sub1=SSpartner Server IP address is 188.166.76.194 => Location: https://cyberbroccoli.com/?a=100813&c=109092&s2=5fa0aeb896c65400011389fc&s3=463 Server IP address is 34.205.83.125 => Location: https://www.mymatchgame.com/landing2?cat=milf&pi=100813&pt1=103824912 Server IP address is 35.224.93.179 Received: from trendyshowcase.com (trendyshowcase.com. [108.166.194.71]) by mx.google.com with ESMTPS id [] for <xxx@gmail.com> (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);… Читать далее affiliate spam @mymatchgame.com
Hosting another phish site at: firebasestorage.googleapis.com
https://firebasestorage.googleapis.com/v0/b/egkkkiiiqq.appspot.com/o/btnn-Rouncube-hash.html?alt=media&token=88957131-f966-4dda-9e62-01c69c1fcd0e#victim@example.org firebasestorage.googleapis.com. 259 IN A 172.217.5.74
New spam vector from Google: «Google Form» / simonridleeey@gmail.com / rev.dikobong@gmail.com
Received: from mail-yb1-f206.google.com (HELO mail-yb1-f206.google.com) (209.85.219.206) by xx; Wed, 18 Nov 2020 19:34:42 +0000 Received: by mail-yb1-f206.google.com with SMTP id xx; Wed, 18 Nov 2020 11:44:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=xx; h=mime-version:reply-to:message-id:date:subject:from:to; bh=xx X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=xx; h=x-gm-message-state:mime-version:reply-to:message-id:date:subject :from:to; bh=xx X-Gm-Message-State: xx MIME-Version: 1.0 X-Received: by 2002:a25:d804:: with SMTP id… Читать далее New spam vector from Google: «Google Form» / simonridleeey@gmail.com / rev.dikobong@gmail.com
Server at appspot.com hosting IRS phishing
https://isdzoop09.uk.r.appspot.com/irs.php?sa.www4.irs.gov/irfof-wmsp/notice;jsessionid=TmJE2NIaELcKxKd31U2CotBv.7c isdzoop09.uk.r.appspot.com. 282 IN A 142.250.68.84