Рубрика: google.com

GoogleUserContent hosts the landing page for a long-time spammer from Sales Catalyst, a Philippines0-based spam operation. The URL is hidden behind bit.ly or a SalesCatalyst link tracker. Google: Please do not allow this spammer to continue to abuse your resources. Received: from mail2.xpert-sender.com (mail2.xpert-sender.com [110.76.190.241]) Date: Thu, 17 Dec 2020 19:##:## +0800 (HKT) From: JHIE… Читать далее Spam Hosting (form.jotform.com)

The host at this IP address is being (ab)used to «listbomb» email addresses: From: charu@websollutions.com Subject: Christmas: Fabulous SEO Offers Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns. Problem resolution ============================ In… Читать далее Abused / misconfigured newsletter service (listbombing)

Spammer hosting located here: https://vchvgycfxfg.page.link/9cr1 -> https://www.metacanal.com/GZZFW4R/QXFHQWW/ —> http://thehealthysavers.com/lions-me-thoraxin/?sub1=X —> https://thoraxin.net/?oid=X $ dig +short vchvgycfxfg.page.link 172.217.168.46 Spam sample ====================================== Received: from aws.amazon.de (unknown [185.32.126.222]) by X (Postfix) with ESMTP for <X>; Thu, 24 Dec 2020 X MIME-Version: 1.0 From: =?UTF-8?B?VGhvcmF4aW4=?= <chello.at> Subject: =?UTF-8?B?IEVuZGxpY2gga/ZubmVuIFNpZSBGZXR0IHZlcmxpZXJlbiwgVGVzdG9zdGVyb24gdW5kIGRlbiBTZXh1YWx0cmllYiBzdGVpZ2Vybi4=?= Reply-To: Received: To: X Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=»UTF-8″ Date: Wed, 23… Читать далее Spammer hosting @172.217.168.46

Spammer hosting located here: https://firebasestorage.googleapis.com/v0/b/projet-1-9f307.appspot.com/o/BUILD.html?alt=media&token=e78f98ca-d904-402e-999d-a14fb0f5391d -> https://bounce.cleaning/bildd/Bild.html —> https://lead1.pl/p/X/X/X —> https://profit-4you-here.life/?u=X $ dig +short firebasestorage.googleapis.com 216.58.215.234 Spam sample =================================== Received: from psv.bronto.com (unknown [185.158.113.243]) by X (Postfix) with ESMTP for <X>; Tue, 29 Dec 2020 X Date: Tue, 29 Dec 2020 X Message-ID: <X-JfVG6IB+X-q@mx3.cheapnet.it> From: Dragon Bitcoin <prabath@mx3.cheapnet.it> To: X Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=»UTF-8″… Читать далее Spammer hosting @216.58.215.234

1/01/2021: This domain has moved from GoDaddy to a new hosting provider, Google. It is continuing to spam through SyedsMarketing. We are listing the domain to protect our users. $ host serviceapartments.com.pk serviceapartments.com.pk has address 34.102.136.180 6/01/2020 [SBL486969]: GoDaddy hosts the A record and website of the domain serviceapartments.com.pk. The owners of this domain have… Читать далее serviceapartments.com.pk

Spammer hosting: https://storage.googleapis.com/06c8cffc4a9b525e1a07/114b2b7f2f330556f2b4 -> http://34.122.208.92/ —> http://34.122.208.92/cl/XXX —> https://chef-metz.com/index2.php?id=XXX —-> https://bestximpression.com/?XXX ——> https://lazyxload.com/click?trvid=XXX ——> https://www.rtg2trk.com/XXX ——-> https://btsyssoftapp.com?lang=XXX $ dig +short storage.googleapis.com 172.217.168.16 216.58.215.240 172.217.168.80 172.217.168.48 Spam sample ==================================================================== Received: from dunia33.com (unknown [104.248.149.204]) by X (Postfix) with ESMTP id X for <X>; Sat, 2 Jan 2021 X MIME-Version: 1.0 From: Dragon Bitcoin <newsletters-no-reply@myfonts.com> To: X… Читать далее Spammer hosting @172.217.168.80

Spammer hosting: https://storage.googleapis.com/06c8cffc4a9b525e1a07/114b2b7f2f330556f2b4 -> http://34.122.208.92/ —> http://34.122.208.92/cl/XXX —> https://chef-metz.com/index2.php?id=XXX —-> https://bestximpression.com/?XXX ——> https://lazyxload.com/click?trvid=XXX ——> https://www.rtg2trk.com/XXX ——-> https://btsyssoftapp.com?lang=XXX Spam sample ==================================================================== Received: from dunia33.com (unknown [104.248.149.204]) by X (Postfix) with ESMTP id X for <X>; Sat, 2 Jan 2021 X MIME-Version: 1.0 From: Dragon Bitcoin <newsletters-no-reply@myfonts.com> To: X Date: Sat, 02 Jan 2021 X Subject: Verdiene… Читать далее Spammer hosting @34.122.208.92

The host at this IP address (35.214.133.82) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: http://logotypfabriken.se/wp-content/balance/tdfu46666340722745c16g659jfn01hq5gs/ http://logotypfabriken.se/wp-content/private_sector/verifiable_warehouse/zlbzqr73_x5zt8y/ http://logotypfabriken.se/wp-content/GGtBFUWJ/ http://logotypfabriken.se/wp-content/Reporting/rzgw3z/2z00i0d3972969294660x7r68fvp3t90s/ AS number: AS15169 AS name: GOOGLE Hostname: 82.133.214.35.bc.googleusercontent.com

The host at this IP address (35.213.136.58) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: http://villamarand.com/lhuv78ktn.zip AS number: AS15169 AS name: GOOGLE Hostname: 58.136.213.35.bc.googleusercontent.com

The host at this IP address (35.214.179.142) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://cashyinvestment.org/wp-content/IH/ https://cashyinvestment.org/wp-content/SzziUCjtadL/ AS number: AS15169 AS name: GOOGLE Hostname: 142.179.214.35.bc.googleusercontent.com