Рубрика: google.com

Spammer hosting located here: https://docs.google.com/document/d/e/2PACX-1vToW2BCRhN7WcGJfb_euQal42ZiKRShhC4uGyowBhJh3IFZ5ufoMTgNDc-5AWirDuV9erhC9eSKLcBX/pub -> https://www.google.com/url?q=http://promo-redirection-01.space/&sa=D&ust=1573655005709000 —> http://promo-redirection-01.space/ —> http://cabinet.de.kryptogewinn-app.vip.rejakeja.xyz/register —-> http://cabinet.de.kryptogewinn-app.vip.rejakeja.xyz/home ——> https://globalix.co?token=X $ dig +short globalix.co 35.201.125.175

Spammer hosting located here: https://enlitacsa1976.blogspot.fr/ -> http://ajoycelyn0251.xyz/de.html —> http://vip.nunuqamo.vip/tracker?offer_id=X —> http://prl.nunuqamo.vip/?pl=X —-> http://vip.nunuqamo.vip/visit?s=X $ dig +short enlitacsa1976.blogspot.fr blogspot.l.googleusercontent.com. 172.217.168.33

The host at this IP address is being (ab)used to «listbomb» email addresses: From: sega503store@gmail.com Subject: BLACK FRIDAY OFFER JUST FOR YOU! Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns. Problem resolution… Читать далее Abused / misconfigured newsletter service (listbombing)

The host at this IP address (35.196.0.250) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://www.bwbranding.com/SYM/WLCHrjKavFjFDJyBfjNgO/ AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 250.0.196.35.bc.googleusercontent.com

The host at this IP address (104.154.135.162) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://gideons.tech/cgi-bin/Scan/up6n7frg0s_8ldx1ma37-8477658408/ http://gideons.tech/cgi-bin/Scan/up6n7frg0s_8ldx1ma37-8477658408/ AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 162.135.154.104.bc.googleusercontent.com

The host at this IP address (104.199.1.118) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://www.datapolish.com/modules/php/msg.jpg AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 118.1.199.104.bc.googleusercontent.com

The host at this IP address (35.201.120.147) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://vainlatestsysadmin—aidan1234567898.repl.co/koteyka20.exe https://vainlatestsysadmin—aidan1234567898.repl.co/MEMZ.exe AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 147.120.201.35.bc.googleusercontent.com

The host at this IP address (104.154.193.231) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: http://blog.valdo.com.br/wp-content/bTkbfey/ AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 231.193.154.104.bc.googleusercontent.com

The host at this IP address (34.94.179.248) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://simonsereno.com/wp-content/plugins/apikey/ckop_dd.tiff AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 248.179.94.34.bc.googleusercontent.com

The host at this IP address (35.204.171.114) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://www.eurobizconsulting.it/cgi-bin/9q6ty/ https://www.eurobizconsulting.it/cgi-bin/owQQqRoSshTLkDTAKXydqg/ AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 114.171.204.35.bc.googleusercontent.com