zkh15.top

This IP address is sending spam for Zacc Serum, a disk jockey located in Paris, France. Zacc Serum hired a bulk email organization named @Mail250 to send bulk email for them. @Mail250 sends a great deal of spam.

We are not sure whether the list that sent this email came from the customer or from @Mail250 itself. However, @Mail250 uses random generic anonymously named domains on scattered VPS ip addresses at several large, inexpensive VPS serices to send email. It has not engaged with Spamhaus after one attempt to claim they were a legitimate Email Service Provider, not a spammer-for-hire. Spamhaus does not accept an organization with @Mail250’s practices as a legitimate ESP.

Received: from zkh15.top (zkh15.top [54.39.146.147])
Date: Mon, 22 Nov 2021 08:##:## +0530
From: Zacc Serum <zaccserum@zkh15.top>
Reply-To: gorylmusicrecords@gmail.com
Subject: Zacc Serum II Promo

<snip>

We present you 2 remixes produced by Zacc Serum, who is a DJ and music producer from Paris. He is signed to the greenstarsmusic label.

https://krakenfiles.com/<x>

<snip>

OVH Hosting, Inc. HO-2 (NET-54-39-0-0-1) 54.39.0.0 — 54.39.255.255
OVH Hosting, Inc. VPS-BHS (NET-54-39-144-0-1) 54.39.144.0 — 54.39.151.255

NetRange: 54.39.144.0 — 54.39.151.255
CIDR: 54.39.144.0/21
NetName: VPS-BHS
NetHandle: NET-54-39-144-0-1
Parent: HO-2 (NET-54-39-0-0-1)
NetType: Reassigned
OriginAS: AS16276
Organization: OVH Hosting, Inc. (HO-2)
RegDate: 2018-08-17
Updated: 2018-08-17
Ref: https://rdap.arin.net/registry/ip/54.39.144.0

OrgName: OVH Hosting, Inc.
OrgId: HO-2
Address: 800-1801 McGill College
City: Montreal
StateProv: QC
PostalCode: H3A 2N4
Country: CA
RegDate: 2011-06-22
Updated: 2017-01-28
Ref: https://rdap.arin.net/registry/entity/HO-2

OrgTechHandle: NOC11876-ARIN
OrgTechName: NOC
OrgTechPhone: +1-855-684-5463
OrgTechEmail: noc@ovh.net
OrgTechRef: https://rdap.arin.net/registry/entity/NOC11876-ARIN

OrgAbuseHandle: ABUSE3956-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-855-684-5463
OrgAbuseEmail: abuse@ovh.ca
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3956-ARIN

Domain Name: zkh15.top
Registry Domain ID: D20210630G10001G_65014099-top
Registrar WHOIS Server: whois.dynadot.com
Registrar URL: http://www.dynadot.com
Updated Date: 2021-06-30T14:17:24Z
Creation Date: 2021-06-30T14:15:59Z
Registry Expiry Date: 2022-06-30T14:15:59Z
Registrar: Dynadot LLC
Registrar IANA ID: 472
Registrar Abuse Contact Email: abuse@dynadot.com
Registrar Abuse Contact Phone: +86.6502620100
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID: REDACTED FOR PRIVACY
Registrant Name: REDACTED FOR PRIVACY
Registrant Organization:
Registrant Street: REDACTED FOR PRIVACY
Registrant City: REDACTED FOR PRIVACY
Registrant State/Province: California
Registrant Postal Code: REDACTED FOR PRIVACY
Registrant Country: US
Registrant Phone: REDACTED FOR PRIVACY
Registrant Phone Ext: REDACTED FOR PRIVACY
Registrant Fax: REDACTED FOR PRIVACY
Registrant Fax Ext: REDACTED FOR PRIVACY
Registrant Email: Please query the RDDS service of the Registrar of Record identified in this output for information on how to contact the Registrant, Admin, or Tech contact of the queried domain name.
Registry Admin ID: REDACTED FOR PRIVACY
Admin Name: REDACTED FOR PRIVACY
Admin Organization: REDACTED FOR PRIVACY
Admin Street: REDACTED FOR PRIVACY
Admin City: REDACTED FOR PRIVACY
Admin State/Province: REDACTED FOR PRIVACY
Admin Postal Code: REDACTED FOR PRIVACY
Admin Country: REDACTED FOR PRIVACY
Admin Phone: REDACTED FOR PRIVACY
Admin Phone Ext: REDACTED FOR PRIVACY
Admin Fax: REDACTED FOR PRIVACY
Admin Fax Ext: REDACTED FOR PRIVACY
Admin Email: Please query the RDDS service of the Registrar of Record identified in this output for information on how to contact the Registrant, Admin, or Tech contact of the queried domain name.
Registry Tech ID: REDACTED FOR PRIVACY
Tech Name: REDACTED FOR PRIVACY
Tech Organization: REDACTED FOR PRIVACY
Tech Street: REDACTED FOR PRIVACY
Tech City: REDACTED FOR PRIVACY
Tech State/Province: REDACTED FOR PRIVACY
Tech Postal Code: REDACTED FOR PRIVACY
Tech Country: REDACTED FOR PRIVACY
Tech Phone: REDACTED FOR PRIVACY
Tech Phone Ext: REDACTED FOR PRIVACY
Tech Fax: REDACTED FOR PRIVACY
Tech Fax Ext: REDACTED FOR PRIVACY
Tech Email: Please query the RDDS service of the Registrar of Record identified in this output for information on how to contact the Registrant, Admin, or Tech contact of the queried domain name.
Name Server: ns1.swp22.com
Name Server: ns2.swp23.com
Name Server: ns3.swp22.com
Name Server: ns4.swp23.com
DNSSEC: unsigned

Опубликовано
В рубрике ovh.net

Добавить комментарий

Ваш адрес email не будет опубликован. Обязательные поля помечены *