жулики

[ypq]

валит спам с вирусней со sberbank-region.ru. под Сбер косят.

X-Greylist: Sender passed SPF test, not delayed by milter-greylist

$whois sberbank-region.ru
% By submitting a query to RIPN's Whois Service
% you agree to abide by the following terms of use:
% http://www.ripn.net/about/servpol.html#3.2 (in Russian)
% http://www.ripn.net/about/en/servpol.html#3.2 (in English).

domain: SBERBANK-REGION.RU
nserver: ns1.sberbank-region.ru. 139.59.32.144
nserver: ns2.sberbank-region.ru. 139.59.32.144
state: REGISTERED, DELEGATED, UNVERIFIED
person: Private Person
registrar: ARDIS-RU
admin-contact: http://ardis.ru/whois/
created: 2017-09-04T19:46:47Z
paid-till: 2018-09-04T19:46:47Z
free-date: 2018-10-05
source: TCI

Last updated on 2017-09-05T10:56:34Z

$host sberbank-region.ru
sberbank-region.ru has address 139.59.32.144

$whois 139.59.32.144
inetnum: 139.59.0.0 - 139.59.255.254
netname: DIGITALOCEAN-AP
descr: DigitalOcean, LLC
country: SG
irt: IRT-DIGITALOCEAN-AP
address: 101 Avenue of the Americas, 10th Floor, New York NY 10013
e-mail: abuse@digitalocean.com

трейс до хоста идет через Бангалор. ага, такой прям Сбер...