Jump to content

Is there a way to see where video from Java links to


petzl

Recommended Posts

https://www.spamcop.net/sc?id=z6451502850zd07b723238632868903d2821f0fe36ddz

would like to know the actual Youtube video these/this spam uses in received spam?
Java scrip hides the source, tried right click video source no-good. These criminals have 100's posted under bogus names on youtube example "https://youtu.be/edu1UmfJbTg" on the right shows from all same crime gang they go through https://t-soft.cc/lp.php

heres my last abuse report

Criminal  phishing, bogus reply address, bogus unsubscribe
This/my email address I believe provided to this Russian (?) Crime gang by FaceBook

posted from 139.59.244.76 is an open proxy abuse@digitalocean.com phishing-report@us-cert.gov
http://cbl.abuseat.org/lookup.cgi?ip=139.59.244.76

URL
https://pushstat.sendpulse.com/pushurls/361646/NzM5NjQz/97152513cf76a54da69215685da34b92/7c977009d5861eebb711656eb7d87a74
Resolves to 193.70.13.222 abuse@ovh.net

Redirects to
http://click.affcrunch.com/aff_r?offer_id=1674&aff_id=3669&url=http%3A%2F%2Fclick2go.link%2Fclick.php%3Fproject_id%3DSbn-%26affiliate_id%3DZhn-%26custom1%3D10238e359a5f2258488583da02e039%26custom2%3Dv2&urlauth=643935563311863739629751418684

Resolves to 52.210.90.239 : abuse@amazonaws.com

linked via phishing spam bogus reply address, bogus unsubscribe
numerous youtube videos posted anon no listed owner/channel?
https://www.youtube.com/watch?v=2b5nWGfptz0
network-abuse@google.com


  

Edited by petzl
Link to comment
Share on other sites

  • 9 months later...

Hey Petzel, 

Posting this acknowledging you've been around way longer than me, actually let me re-word that, you've been around on SCF way longer than me:), so I may not be on the right track, however, using the links provided & your SCF report I get:

https://www.virustotal.com/#/domain/pushstat.sendpulse.com

https://www.virustotal.com/#/domain/click.affcrunch.com

https://www.virustotal.com/#/url/1e0c25ab42752181cc197651c2dcec630b564279938ea632bdf1a71d7f149f0e/details

https://www.virustotal.com/#/domain/smartiyke41.duckdns.orghttps://www.virustotal.com/#/domain/smartiyke41.duckdns.org

https://www.virustotal.com/#/url/8b24aa770a546505998fbe71fa5f5523b4df529c69d202c415e25313725ed36c/detection

Any use?

Cheers

Edited by MIG
Corrected link
Link to comment
Share on other sites

20 minutes ago, MIG said:

Thanks have slowed this criminal down but comes back every few months 

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...