Spammer hosting @104.26.9.80

Spammer hosting located here:
https://t.raptorsmartadvisor.com/.lty?url=inother.me?X
-> http://inother.me/?X
—> https://www.loansidemed.com/X
—> https://translatorenence.com/articles/japan-tech/?lX

$ dig +short t.raptorsmartadvisor.com
104.26.9.80
172.67.70.232
104.26.8.80

Spam sample
==============================================
Received: from whale.canuswim.pro ([138.91.52.151])
by X with ESMTP
id X; Wed, 30 Mar 2022 X
Received: from tpgau.xyz (unknown [74.63.254.136]) by X (Postfix) with ESMTP id X for <X; Wed, 30 Mar 2022 X
MIME-Version: 1.0
Message-Id: <X@presentcharity.net>
From: Instant Translator <X@presentcharity.net>
Subject: Bereisen Sie die Welt mit Zuversicht
Reply-To: reply_to@presentcharity.net
To: X
Content-Type: multipart/alternative; boundary=—boundary_X
Date: Wed, 30 Mar 2022 X
X-CMAE-Envelope: X

[…]

—-boundary_3126_24ef9351-6a4d-4248-b046-573e142aecd4
Content-Type: text/html; charset=utf-8

<html><body>
<p style=»font-size:3px;»>Your X Portal !</p>
<p style=»font-size:3px;»>received this mail in error or need You will be asked X Portal with the link below:</p>
<p style=»font-size:3px;»>username: X</p>

<div style=»background-color:White»>
<table width=»80%» style=»margin: 0 auto; border:1px solid;text-align:center»>
<tr>
<td>

<a href=»https://t.raptorsmartadvisor.com/.lty?url=inother.me?X=»><font SIZE=»5″ face=’Elephant’ color=»red» >Holen Sie sich 50 % Rabatt auf dieses Ãœbersetzergerät! Begrenzter Vorrat!</font></p><br />
[…]
==============================================

Добавить комментарий

Ваш адрес email не будет опубликован.