Jump to content
petzl

Is there a way to see where video from Java links to

Recommended Posts

https://www.spamcop.net/sc?id=z6451502850zd07b723238632868903d2821f0fe36ddz

would like to know the actual Youtube video these/this spam uses in received spam?
Java scrip hides the source, tried right click video source no-good. These criminals have 100's posted under bogus names on youtube example "https://youtu.be/edu1UmfJbTg" on the right shows from all same crime gang they go through https://t-soft.cc/lp.php

heres my last abuse report

Criminal  phishing, bogus reply address, bogus unsubscribe
This/my email address I believe provided to this Russian (?) Crime gang by FaceBook

posted from 139.59.244.76 is an open proxy abuse@digitalocean.com phishing-report@us-cert.gov
http://cbl.abuseat.org/lookup.cgi?ip=139.59.244.76

URL
https://pushstat.sendpulse.com/pushurls/361646/NzM5NjQz/97152513cf76a54da69215685da34b92/7c977009d5861eebb711656eb7d87a74
Resolves to 193.70.13.222 abuse@ovh.net

Redirects to
http://click.affcrunch.com/aff_r?offer_id=1674&aff_id=3669&url=http%3A%2F%2Fclick2go.link%2Fclick.php%3Fproject_id%3DSbn-%26affiliate_id%3DZhn-%26custom1%3D10238e359a5f2258488583da02e039%26custom2%3Dv2&urlauth=643935563311863739629751418684

Resolves to 52.210.90.239 : abuse@amazonaws.com

linked via phishing spam bogus reply address, bogus unsubscribe
numerous youtube videos posted anon no listed owner/channel?
https://www.youtube.com/watch?v=2b5nWGfptz0
network-abuse@google.com


  

Edited by petzl

Share this post


Link to post
Share on other sites

Hey Petzel, 

Posting this acknowledging you've been around way longer than me, actually let me re-word that, you've been around on SCF way longer than me:), so I may not be on the right track, however, using the links provided & your SCF report I get:

https://www.virustotal.com/#/domain/pushstat.sendpulse.com

https://www.virustotal.com/#/domain/click.affcrunch.com

https://www.virustotal.com/#/url/1e0c25ab42752181cc197651c2dcec630b564279938ea632bdf1a71d7f149f0e/details

https://www.virustotal.com/#/domain/smartiyke41.duckdns.orghttps://www.virustotal.com/#/domain/smartiyke41.duckdns.org

https://www.virustotal.com/#/url/8b24aa770a546505998fbe71fa5f5523b4df529c69d202c415e25313725ed36c/detection

Any use?

Cheers

Edited by MIG
Corrected link

Share this post


Link to post
Share on other sites
20 minutes ago, MIG said:

Thanks have slowed this criminal down but comes back every few months 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×