The host at this IP address (35.231.145.151) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://gitlab.com/796b131d37/katete/raw/master/Wondershare8765.zip?inline=false AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 151.145.231.35.bc.googleusercontent.com

Spammer hosting located here: https://docs.google.com/document/d/e/2PACX-1vToW2BCRhN7WcGJfb_euQal42ZiKRShhC4uGyowBhJh3IFZ5ufoMTgNDc-5AWirDuV9erhC9eSKLcBX/pub -> https://www.google.com/url?q=http://promo-redirection-01.space/&sa=D&ust=1573655005709000 —> http://promo-redirection-01.space/ —> http://cabinet.de.kryptogewinn-app.vip.rejakeja.xyz/register —-> http://cabinet.de.kryptogewinn-app.vip.rejakeja.xyz/home ——> https://globalix.co?token=X $ dig +short docs.google.com 172.217.168.78

Spammer hosting located here: https://docs.google.com/document/d/e/2PACX-1vToW2BCRhN7WcGJfb_euQal42ZiKRShhC4uGyowBhJh3IFZ5ufoMTgNDc-5AWirDuV9erhC9eSKLcBX/pub -> https://www.google.com/url?q=http://promo-redirection-01.space/&sa=D&ust=1573655005709000 —> http://promo-redirection-01.space/ —> http://cabinet.de.kryptogewinn-app.vip.rejakeja.xyz/register —-> http://cabinet.de.kryptogewinn-app.vip.rejakeja.xyz/home ——> https://globalix.co?token=X $ dig +short www.google.com 172.217.168.68

Spammer hosting located here: https://docs.google.com/document/d/e/2PACX-1vToW2BCRhN7WcGJfb_euQal42ZiKRShhC4uGyowBhJh3IFZ5ufoMTgNDc-5AWirDuV9erhC9eSKLcBX/pub -> https://www.google.com/url?q=http://promo-redirection-01.space/&sa=D&ust=1573655005709000 —> http://promo-redirection-01.space/ —> http://cabinet.de.kryptogewinn-app.vip.rejakeja.xyz/register —-> http://cabinet.de.kryptogewinn-app.vip.rejakeja.xyz/home ——> https://globalix.co?token=X $ dig +short globalix.co 35.201.125.175

Spammer hosting located here: https://enlitacsa1976.blogspot.fr/ -> http://ajoycelyn0251.xyz/de.html —> http://vip.nunuqamo.vip/tracker?offer_id=X —> http://prl.nunuqamo.vip/?pl=X —-> http://vip.nunuqamo.vip/visit?s=X $ dig +short enlitacsa1976.blogspot.fr blogspot.l.googleusercontent.com. 172.217.168.33

The host at this IP address is being (ab)used to «listbomb» email addresses: From: sega503store@gmail.com Subject: BLACK FRIDAY OFFER JUST FOR YOU! Problem description ============================ Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns. Problem resolution… Читать далее Abused / misconfigured newsletter service (listbombing)

The host at this IP address (35.196.0.250) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://www.bwbranding.com/SYM/WLCHrjKavFjFDJyBfjNgO/ AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 250.0.196.35.bc.googleusercontent.com

The host at this IP address (104.154.135.162) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://gideons.tech/cgi-bin/Scan/up6n7frg0s_8ldx1ma37-8477658408/ http://gideons.tech/cgi-bin/Scan/up6n7frg0s_8ldx1ma37-8477658408/ AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 162.135.154.104.bc.googleusercontent.com

The host at this IP address (104.199.1.118) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://www.datapolish.com/modules/php/msg.jpg AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 118.1.199.104.bc.googleusercontent.com

The host at this IP address (35.201.120.147) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware: https://vainlatestsysadmin—aidan1234567898.repl.co/koteyka20.exe https://vainlatestsysadmin—aidan1234567898.repl.co/MEMZ.exe AS number: AS15169 AS name: GOOGLE — Google LLC Hostname: 147.120.201.35.bc.googleusercontent.com