185.174.102.96

Phishing IP: 185.174.102.96
Received: from server.turs-eks.com (185.174.102.96)
Received: from ec2-34-254-181-55.eu-west-1.compute.amazonaws.com (34.254.181.55)
Date: 25 Jan 2023 09:13:31 +0000
From: Milos Rodic <[email protected]>
Reply-To: Milos Rodic <[email protected]>
Subject: {Spam?} Urgent quote for WITZ TRADE GLOBAL
Body: I have sent several emails to your company but no response.
Attachment: *.rar (Suspicious attachment detected!)
Bulk: yes
Other: blocked by Dnsbl
LZAC-MAC-Never Expires

Domain info:
Domain Name: MILCIODOO.COM
Updated Date: 2023-01-10T17:01:10Z
Creation Date: 2023-01-10T17:01:10Z
Registry Expiry Date: 2024-01-10T17:01:10Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

Domain Name: TURS-EKS.COM
Updated Date: 2023-01-23T09:58:14Z
Creation Date: 2022-06-01T22:28:47Z
Registry Expiry Date: 2023-06-01T22:28:47Z
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com

milciodoo.com mail exchanger = 100 us2.mx3.mailhostbox.com.
milciodoo.com mail exchanger = 100 us2.mx2.mailhostbox.com.
milciodoo.com mail exchanger = 100 us2.mx1.mailhostbox.com.

turs-eks.com mail exchanger = 25 mail.turs-eks.com.
mail.turs-eks.com ip = 185.174.102.96