Spammer hosting located here:
https://objectstorage.us-ashburn-1.oraclecloud.com/n/idqyn1owx1ll/b/crazyglowlemon/o/1dqgqcalkdh.html
-> https://w.followflow.net/index.php?id_promo=X&promokeys=X
—> https://lp.crazyglow.com/c1ad419/?bid=X
$ dig +short objectstorage.us-ashburn-1.oraclecloud.com
objectstorage.us-ashburn-1.oci.oraclecloud.com.
134.70.28.1
134.70.24.1
134.70.32.1
Spam sample
====================================================================
Received: from presentcharity.net (presentcharity.net [185.235.128.117])
by X (Postfix) with ESMTP id X
for <X>; Wed, 28 Apr 2021 X
DKIM-Signature: X
DomainKey-Signature: X
MIME-Version: 1.0
Message-Id: <X@presentcharity.net>
From: =?UTF-8?B?Q3JhenlnbG93?= <6vgXQzs@presentcharity.net>
Subject: =?UTF-8?B?Q3LDqG1lIGNvbG9yYW50ZSB0ZW1wb3JhaXJlIG5hdHVyZWxsZQ==?=
Reply-To: reply_to@presentcharity.net
To: Xh
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset=UTF-8
Date: Wed, 28 Apr 2021 X
<center>
<a href=’https://objectstorage.us-ashburn-1.oraclecloud.com/n/X’ style=’outline:none’ tabindex=’-1′ target=’_blank’>
[…]
====================================================================