Spammer hosting located here:
https://firebasestorage.googleapis.com/v0/b/projet-1-9f307.appspot.com/o/BUILD.html?alt=media&token=e78f98ca-d904-402e-999d-a14fb0f5391d
-> https://bounce.cleaning/bildd/Bild.html
—> https://lead1.pl/p/X/X/X
—> https://profit-4you-here.life/?u=X
$ dig +short firebasestorage.googleapis.com
216.58.215.234
Spam sample
===================================
Received: from psv.bronto.com (unknown [185.158.113.243])
by X (Postfix) with ESMTP
for <X>; Tue, 29 Dec 2020 X
Date: Tue, 29 Dec 2020 X
Message-ID: <X-JfVG6IB+X-q@mx3.cheapnet.it>
From: Dragon Bitcoin <prabath@mx3.cheapnet.it>
To: X
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset=»UTF-8″
X-Gm-Message-State: X
Subject: X ,Verdiene 7000 Euro pro Tag von zu Hause aus
X-BeenThere: oauth@bronto.com
sender: <X>
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: OAUTH WG <oauth.bronto.com>
<center>
<a href=»https://firebasestorage.googleapis.com/v0/b/projet-1-9f307.appspot.com/o/BUILD.html?alt=media&token=e78f98ca-d904-402e-999d-a14fb0f5391d»><span style=»color: orange;text-decoration:none;»></span></h1>
<font size=»20px» color=»red»> Verdiene 7000 Euro pro Tag von zu Hause aus<br>
<a href=»https://firebasestorage.googleapis.com/v0/b/projet-1-9f307.appspot.com/o/BUILD.html?alt=media&token=e78f98ca-d904-402e-999d-a14fb0f5391d»><img src=»https://imgur.com/qZOmXfD.png»></a></center></div>
<a href=»https://firebasestorage.googleapis.com/v0/b/projet-1-9f307.appspot.com/o/BUILD.html?alt=media&token=e78f98ca-d904-402e-999d-a14fb0f5391d»><img src=»//imgur.com/qZOmXfD.png»></a></center></div>
<center><a href=»https://firebasestorage.googleapis.com/v0/b/projet-1-9f307.appspot.com/o/BUILD.html?alt=media&token=e78f98ca-d904-402e-999d-a14fb0f5391d»><img src=»https://imgur.com/yvdKRyw.png»></a><br><br>
<center><a href=»https://firebasestorage.googleapis.com/v0/b/projet-1-9f307.appspot.com/o/BUILD.html?alt=media&token=e78f98ca-d904-402e-999d-a14fb0f5391d»><img src=»//imgur.com/yvdKRyw.png»></a><br><br>
===================================