I found a scheme. Someone is redirecting (301) entire domains to my website.
Some are pointing to my homepage, redirecting before that to an intemediary domain.
Others are pointing to a non existent page (404) of my website.
They have few backlinks pointing at them (directories). It's old domains (registered in 2005!).
Disavow the domains? It's not even backlinks, it's a redirect.
I can not trace right now since when it's pointing at me, but I got hit by core june update.
Do you guys have some inputs?