Update 2020-05-13
Received: from tampa.corocell.guru (unknown [50.2.212.74])
Date: Wed, 13 May 2020 04:5x:xx -0400
From: «VAHomeSavings» <VAReliefProgram@corocell.guru>
Subject: VA housing benefits are going unclaimed in {{contact.state}}
URL redirects:
URL: http://corocell.guru/[]
Server IP address is 107.158.163.223
Location: http://specialsoffers.co/adv/vassp1
Server IP address is 104.28.18.246
Location: https://www.bests.guru/73MDC78/NDP81F4/?sub1=vssp1
Server IP address is 104.28.14.87
——————————————————-
Received: from durham.saniday.live (unknown [170.130.209.133])
Date: Mon, 4 May 2020 09:2x:xx -0400
From: «Mothers Day special» <TurmericforMothersDay@saniday.live>
Subject: 3 Free bottles of Turmeric for Mothers Day
URL redirect chain:
URL: http://saniday.live/[]
Server IP address is 104.140.246.149
Location: https://specialsoffers.co/sns/mdtp1
Server IP address is 104.28.18.246