Google hoss the A record and webise of the domain lp01jtrk.com, which provides redirection services in spam sent to advertise the domain everydaywinner.com. The spam is sent to email addressees scraped from websites and similar public forums.
The spammer appears to be listwshing email addresses scraped from websites with phoney confirmation emails. Any response to those emails would be produced as proof of confirmation if the spammer is accused of spamming in the future.
Google: please do not allow your services to be abused by this spam operation!
2020-11-10
Received: from umpy.imgflip.com (52.138.202.165)
From: Dyson Supersonic
Subject: Test & Keep a Dyson Supersonic hair dryer worth £250
Date: Tue, 10 Nov 2020 10:1x:xx +0100
URL: https://www.lp01jtrk.com/[]/?creative_id=4302
Server IP address is 34.95.111.202 =>
Location: https://vam.xpressconnectlink.company/?s1=[]&kw=376&s2=376&s3=
Server IP address is 104.148.17.138
——————————
Received: from <x> (unknown [167.71.206.27])
Date: Fri, 05 Jun 2020 16:##:## +0200
From: Selected Winner<info@evrydaywin.com>
Subject: Urgent: Complete Your $500 Entry Now
<snip>
Congratulations! Yes! You are a finalist.
You have been selected to enter our $500 Daily Giveaway on Everydaywinner.com
You have ONE FINAL STEP to complete your entry.
Confirm Your Entry Here.
<snip>
URI: https://bin.wf/<x>
Redirects to => https://www.lp01jtrk.com/<x>
Redirects to => https://r.everydaywinner.com/?<x>
Redirects to => https://www.everydaywinner.com/fgi.php?<x>
HOST LOOKUP:
$ host www.lp01jtrk.com
www.lp01jtrk.com has address 34.95.111.202
$ host 34.95.111.202
202.111.95.34.in-addr.arpa domain name pointer 202.111.95.34.bc.googleusercontent.com.
$ host lp01jtrk.com
lp01jtrk.com has address 34.95.111.202
WHOIS:
Domain Name: lp01jtrk.com
Registry Domain ID: 2485893050_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.google.com
Registrar URL: https://domains.google.com
Updated Date: 2020-01-28T20:26:47Z
Creation Date: 2020-01-28T20:26:46Z
Registrar Registration Expiration Date: 2021-01-28T20:26:46Z
Registrar: Google LLC
Registrar IANA ID: 895
Registrar Abuse Contact Email: registrar-abuse@google.com
Registrar Abuse Contact Phone: +1.8772376466
Domain Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: Contact Privacy Inc. Customer 1246358552
Registrant Organization: Contact Privacy Inc. Customer 1246358552
Registrant Street: 96 Mowat Ave
Registrant City: Toronto
Registrant State/Province: ON
Registrant Postal Code: M4K 3K1
Registrant Country: CA
Registrant Phone: +1.4165385487
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: xg5qi9ijzsjq@contactprivacy.email
Registry Admin ID:
Admin Name: Contact Privacy Inc. Customer 1246358552
Admin Organization: Contact Privacy Inc. Customer 1246358552
Admin Street: 96 Mowat Ave
Admin City: Toronto
Admin State/Province: ON
Admin Postal Code: M4K 3K1
Admin Country: CA
Admin Phone: +1.4165385487
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: xg5qi9ijzsjq@contactprivacy.email
Registry Tech ID:
Tech Name: Contact Privacy Inc. Customer 1246358552
Tech Organization: Contact Privacy Inc. Customer 1246358552
Tech Street: 96 Mowat Ave
Tech City: Toronto
Tech State/Province: ON
Tech Postal Code: M4K 3K1
Tech Country: CA
Tech Phone: +1.4165385487
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: xg5qi9ijzsjq@contactprivacy.email
Name Server: NS-CLOUD-C1.GOOGLEDOMAINS.COM
Name Server: NS-CLOUD-C2.GOOGLEDOMAINS.COM
Name Server: NS-CLOUD-C3.GOOGLEDOMAINS.COM
Name Server: NS-CLOUD-C4.GOOGLEDOMAINS.COM
DNSSEC: unsigned