Spammer hosting located here:
https://storage.googleapis.com/da1ba2bf05e3154/567f99101c349ee#XX
-> http://goodforus.globallivefromus.cloudns.cl/
—> https://beautynsport.com/X
—> https://bobcoolgoodies.com/X
—-> https://happywreward.com/X
$ dig +short storage.googleapis.com
216.58.215.240
172.217.168.80
172.217.168.48
172.217.168.16
Spam sample
====================================================================
Received: from freetvguide.co.nz (static.44.150.181.135.clients.your-server.de [135.181.150.44])
by X (Postfix) with ESMTP id X
for <X>; Mon, 4 Jan 2021 X
List-Unsubscribe: <X>
Date:Mon, 04 Jan 2021 X
Message-Id:<X>
Reply-To: [reply_to]
To: X
Received: from nfbj.ZYQJTWQ.zGAr (ugo.SabeOb.dP . 216.244.76.116)
Subject: =?UTF-8?B?SG9sZW4gU2llIHNpY2ggSWhyZSBGbGFzY2hlIHplcnRpZml6aWVydGVzIG9yZ2FuaXNjaGVzIFZvbGxzcGVrdHJ1bS1DQkQtw5ZsIGbDvHIgYmVzdGUgUmVzdWx0YXRlIQ==?=
From: =?UTF-8?B?LSBTYXJhaCdzIEJsZXNzaW5n?= <LSiiNvFa@SabeOb.tsXGPbuxij.qDFaONmnGUzUYYxJVVLQ.de>
List-Unsubscribe: <X>
Content-Type: text/html
Content-Transfer-Encoding: amazonses.com
<div
style=»WIDTH: 5px; MIN-HEIGHT: 30px; TOP: 0px; BOTTOM: 0px; BACKGROUND-COLOR: rgb(86,166,89)»>
<div
style=»font-SIZE: 13px; MARGIN-BOTTOM: 10px; font-FAMILY: wf_segoe-ui_normal, Segoe UI, Segoe WP, Tahoma, Arial, sans-serif; WIDTH: 400px; MARGIN-TOP: 10px; font-WEIGHT: normal; COLOR: black; PADDING-BOTTOM: 5px; PADDING-TOP: 5px; PADDING-LEFT: 9px»>Diese
Die Nachricht stammt von einem vertrauenswürdigen Absender.</div></div></div>
<CENTER>
<A href=»https://storage.googleapis.com/da1ba2bf05e3154/567f99101c349eeXXX»><STRONG><FONT
color=#000066 size=6><samp>Erleben Sie die Kraft von 1 0 0 % Vollspektrum-CBD-Öl<br><br><center><font color=»red»><samp>Klicke hier</FONT></STRONG></FONT></A><BR><BR><A
<a href=»https://storage.googleapis.com/da1ba2bf05e3154/567f99101c349ee#XX» > <img src=»https://storage.googleapis.com/917f456e14c4888/ef908afbc66bbe7″ ></a> <br>
<a href=»https://storage.googleapis.com/da1ba2bf05e3154/567f99101c349ee#XX» > <img src=»https://storage.googleapis.com/df38d5fa0c49373/d989caf4242fb01″ ></a> <br>
<a href=»https://storage.googleapis.com/da1ba2bf05e3154/567f99101c349ee#XX» > <img src=»https://storage.googleapis.com/579a6e91b567ee1/47e15af4f9137ab» ></a> <br>
</CENTER>
====================================================================