Mail server distributing phish spam. It claims to be «bcehhs.com», and there is a PTR record pointing to this name, but this domain is not registered.
17.190.93.142.in-addr.arpa. IN PTR bcehhs.com.
=====================================================================
Return-Path: <noreply@mail.us>
Received: from bcehhs.com (unknown [142.93.190.17])
by x (Postfix) with ESMTP id x
for <x>; Thu, 6 Jan 2022 xx:xx:xx -0600 (CST)
Received: from mail.us (unknown [37.120.193.244])
by bcehhs.com (Postfix) with ESMTP id x
for <x>; Thu, 6 Jan 2022 xx:xx:xx +0000 (UTC)
From: Mail Team<noreply@mail.us>
To: x
Subject: Your mailbox is almost full.
Date: 06 Jan 2022 xx:xx:xx +0100
MIME-Version: 1.0
Content-Type: text/html;
charset=»iso-8859-1″
Content-Transfer-Encoding: quoted-printable
Message-ID: <x@mail.us>
<A […] href=3D»https://aaipk.com/sv/index.php?email=3Dx» […]>
Click Here to Update x</A>