Spammer hosting located here:
http://sotchibtc.duckdns.org/XXX
-> http://smplewilld.com/r/X
—> https://track.go-trclk.com/tracker?c=X
—> https://track.thebitcoin-wealth.com/X
$ dig +short track.thebitcoin-wealth.com
104.27.142.45
104.27.143.45
Spam sample
============================================
Received: from splitboxes.info (1126ezr83.ni.net.tr [94.102.5.112])
by X (Postfix) with ESMTP id X
for <X>; Fri, 21 Feb 2020 X
X-Apparently-To: jessicasweety999@yahoo.com; Fri, 06 Dec 2019 X
Authentication-Results: X
Received-SPF: pass (domain of gmail.com designates 209.85.166.195 as permitted sender)
X-YMailISG:X
X-Originating-IP: [209.85.166.195]
Received: from 10.217.136.19 (EHLO mail-il1-f195.google.com) (209.85.166.195)
by mta4174.mail.ne1.yahoo.com with SMTPS; Fri, 06 Dec 2019 X
Received: by mail-il1-f195.google.com with SMTP id X
for <jessicasweety999@yahoo.com>; Thu, 05 Dec 2019 X
DKIM-Signature: X
X-Google-DKIM-Signature: X
X-Gm-Message-State: X
X-Google-Smtp-Source: X
X-Received: by 2002:a92:844b:: with SMTP id X;
Thu, 05 Dec 2019 X
MIME-Version: 1.0
From:=?UTF-8?B?4pyn4pywIA==?= X =?UTF-8?B?4pyw4pyn?= <murray_jo@dodo.com.au>
Date: Thu, 20 Feb 2020 X
Message-ID: <CANAr50mAJ3=RuWuGNc4958wvKLv8yVC8BGQB2I2OFLTC8LKIF@mail.gmail.com>
Subject:=?UTF-8?B?TGVybmUgV3VuZGVyIGF1cyBkZW0gQml0Y29pbi1Db2RlIHVuZCDDpG5kZXJlIGRlaW4gTGViZW4h?=
Content-Type: multipart/alternative; boundary=»X»
—X
Content-Type: text/plain; charset=»UTF-8″
Content-Transfer-Encoding: quoted-printable
*Kun for *
<https://s.free.fr/X>
Abmelden <http://brinscre.duckdns.org/unsub/>
—X
Content-Type: text/html; charset=»UTF-8″
Content-Transfer-Encoding: quoted-printable
<div dir=3D»ltr»><div style=3D»text-align:center»><a href=3D»http://sotchibtc.duckdns.org/X» style=3D»font-family:»Times New Roman»;font-=
size:medium»><b><font color=3D»red» size=3D»60″>Lerne Wunder aus dem Bitcoin-Code und ändere dein Leben!
</font></b></a><span style=3D»color:rgb(0=
,0,0);font-family:»Times New Roman»;font-size:medium»></span><br =
style=3D»color:rgb(0,0,0);font-family:»Times New Roman»;font-size=
:medium»><br style=3D»color:rgb(0,0,0);font-family:»Times New Roman&qu=
ot;;font-size:medium»><br><a href=3D»http://sotchibtc.duckdns.org/X»><img src=»http://sotchibtc.duckdns.org/X/X.JPG» /></a><br><br style=3D»color:rgb(0,0,0);font-family:&qu=
ot;Times New Roman»;font-size:medium»><br style=3D»color:rgb(0,0,0);fo=
nt-family:»Times New Roman»;font-size:medium»><br style=3D»color:=
rgb(0,0,0);font-family:»Times New Roman»;font-size:medium»><a hre=
f=3D»» style=3D»font-family:»Times N=
ew Roman»;font-size:medium»><br></div></div>
—X—
<img src=’http://splitboxes.info/app/redirection/open.php?id_campaign=X’ width=’0′ height=’0’/>
============================================