103.109.37.17

Phishing IP: 103.109.37.17
Received: from mx2.ultra.com.br (103.109.37.17)
X-SourceIP: 142.0.83.126
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=key1; d=kirklands.com;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=app; d=esp1.co;
Date: Wed, 07 Dec 2022 11:52:24 +0100
From: "REGISTRAR" <[email protected]>
Subject: {Spam?} $user Please Affirm Your Reward Worth $900.00
Body: https://app.getresponse.com/click.html
Bulk: yes
Other: blocked by Dnsbl
Incorrect A/MX records
LZAC-Never Expires