Bitcoin spam

[insider]

header:

01: Return-Path: <x [at] inspire.pinterest.com>
02: Received: from inspire.pinterest.com ([122.254.114.143]) by mx-ha.web.de
03: 	(mxweb111 [212.227.17.8]) with ESMTP (Nemesis) ID: [ID filtered]
04: Message-ID: [ID filtered]
05: Date: Thu, 14 Nov 2019 xx:xx:xx -0500
06: Subject: Lernen Sie, mit groBen Markenunternehmen zu handeln und in diese zu investieren
07: From: "Handeln & investieren" <vqmzizo [at] inspire.pinterest.com>
08: 	<no_reply [at] EPN.BZ>

Ziel: ^whois:https://www.bitcoin-investment-plan.com/?clickID=x&aff=&c=BE&tid=x&aff_id=1057&aff_sub3=670066&aff_sub4=690234&source=

[insider]

header:

01: Return-Path: <x [at] propenium.com>
02: Received: from propenium.com ([85.114.138.105]) by mx-ha.web.de (mxweb110
03: 	[212.227.17.8]) with ESMTP (Nemesis) ID: [ID filtered]

Ziel: ^whois:https://www.bitcoinrev1.com/?clickID=x5&aff=&c=BE&tid=x&aff_id=1057


Beweissicherung:

[insider]

header:

01: Return-Path: <>
02: Received: from tilpas.lenging.com ([89.252.133.152]) by mx-ha.web.de (mxweb010
03: 	[212.227.15.17]) with ESMTP (Nemesis) ID: [ID filtered]
04: DKIM-Signature: x
05: Date: Sat, 23 Nov 2019 xx:xx:xx -0500
06: From: Money Making<K4AN9L [at] klf.tilpas.lenging.com>

Ziel: ^whois:https://codenet-systems.com/?clickID=x&aff=&c=BE&tid=x&aff_id=1057


Beweissicherung:

[kjz1]

Mal wieder die üblichen Verdächtigen: OVH, Namecheap, Cloudflare...

header:

01: Received: from mout.perfora.net ([74.208.4.197]) by mx-ha.gmx.net (mxgmx102
02:  [212.227.17.5]) with ESMTPS (Nemesis) ID: [ID filtered]
03:  <x>; Sun, 01 Dec 2019 xx:xx:xx +0100
04: Received: from infong-us26.perfora.net ([74.208.57.167]) by
05: mrelay.perfora.net
06:  (mreueus004 [172.19.143.3]) with ESMTPA (Nemesis) ID: [ID filtered]
07:  for <x>; Sun, 01 Dec 2019 xx:xx:xx +0100
08: Received: from 185.183.107.164 (IP may be forged by CGI script)
09:     by infong-us26.perfora.net with HTTP ID: [ID filtered]

Dear LocalBitcoins User.

We are currently undergoing maintenance exercise to improve our
service's quality.
Please login and agree to the most recent terms of use.

^whois:http://localbitcoins.com/verify_account/

^whois:https://outdoortuscany.com/info/55685

failure to do so may result in the cancellation of you account.

Thanks, and sorry for the inconvenience.

Best regards,

LocalBitcoins Team

weiter auf:

^whois:http://theyellowguy.nl/oud_wp/lbc/