Spammer hosting located here:
https://gfhdfhf.page.link/568b
-> https://aptrk13.com/?a=X
—> https://fn3gx.agileconnection.company/?s1=X
—> https://fn3gx.zb1evjbofq.top/t/X
—-> https://ultrapartners.net/redirect/id/30473/X
——> https://besuchvegas.com/de/?id=&affid=30473&m=X
——> https://www.vegas-ch.com/de/?id=&affid=30473&m=X
$ dig +short aptrk13.com
35.204.93.160
Spam sample
============================================================
Received: from chello.at (afazers.club [185.32.126.38])
by X (Postfix) with ESMTP
for <X>; Wed, 6 Jan 2021 X
MIME-Version: 1.0
From: =?UTF-8?B?T2huZSBBdWZ3YW5kIE9obmUg?= <News@chello.at>
Subject: =?UTF-8?B?IEVuZ2xpc2NoIHdpcmQgdm9uIGFsbGVpbiBnZWxlcm50ICE=?=
Reply-To: News@chello.at
Received: News@chello.at
To: X
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset=»UTF-8″
Date: Wed, 06 Jan 2021 X
<HTML><HEAD></HEAD>
<BODY>
<P><A href=» https://gfhdfhf.page.link/568b «>
Engli<HTML>sh <HTML>Bina<HTML>ural<HTML> Sys<HTML><HTML>tem <HTML>aut<HTML>oma<HTML>tisch!<HTML><HTML><HTML></A></P>
<IMG border=0 hspace=0 alt=»» src=»
https://i.imgur.com/OMYqi7b.jpg
» align=baseline><BR></A></P></BODY></HTML>
============================================================