Spammer hosting located here:
http://www.win2go.ch
$ dig +short www.win2go.ch
win2go.ch.
195.201.212.216
Spam sample
===========================================================
Received: from mail.paviotupe.online (mail.paviotupe.online [198.91.86.110])
by X (Postfix) with ESMTP id X
for <X>; Thu, 25 Nov 2021 X
DKIM-Signature: X
Received: from hike.mavropole.co.in (198.12.85.164) by mail.paviotupe.online id X for <X>; Thu, 25 Nov 2021 X(envelope-from <bounce2@paramaguty.de>)
Message-ID: <X@paramaguty.de>
Date: Thu, 25 Nov 2021 X
Subject: Gewinne einen smart EQ fortwo im Wert von CHF 26’401.
From: Win2go <newsletter@fromonix.ch>
Reply-To: Win2go <fromonixcom@gmail.com>
To: X
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=»_=X=_»
X-Sender: bounce2@paramaguty.de
X-Report-Abuse: Please report abuse for this campaign here:
https://hike.mavropole.co.in/campaigns/X/report-abuse/X/X
X-Receiver: X
X-Edsw-Tracking-Did: 0
X-Edsw-Subscriber-Uid: X
X-Edsw-Mailer: SwiftMailer — 5.4.x
X-Edsw-EBS: https://hike.mavropole.co.in/lists/block-address
X-Edsw-Delivery-Sid: X
X-Edsw-Customer-Uid: X
X-Edsw-Customer-Gid: X
X-Edsw-Campaign-Uid: X
Precedence: bulk
List-Unsubscribe: <https://hike.mavropole.co.in/lists/X/unsubscribe/X/X/unsubscribe-direct?source=email-client-unsubscribe-button>,
<mailto:X>
List-Id: X <X>
Feedback-ID: X
—_=X=_
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
https://www.win2go.ch/
[…]
===========================================================