High spam volume on treasurer email alias

I found this, you are using Rogers.com email system and it plays with email links to make the safe ..... cough cough

URL Rewriting / Link Protection: The system automatically scans links in incoming emails. If you click a link, it may be briefly routed through a secure tracking or safety checker (often showing a Yahoo! or Rogers security domain) before sending you to the final website.

Below is a sample link from one of the messages.Is this spam? Click the following link or go to the web page below to add this sender's email address (Lowes Welcomes You ) to your FreeToastHost club website email blacklist: Click To Block Sender
Web Page: https://8684.toastmastersclubs.org?blacklist=01061491-Lowes%20Welcomes%20You%20%3Cloweswelcomesyou%40zinaonline.com%3E&_=hbGx
 

I have changed my Freetoasthost profile to a gmail account to see what happens from within gmail.

I then sent a test message to the treasurer account from another gmail account to see what is the link showing. It shows as:

Is this spam? Click the following link or go to the web page below to add this sender's email address (Glendon Smith ) to your FreeToastHost club website email blacklist:  Click To Block Sender
Web Page:  https://8684.toastmastersclubs.org?blacklist=01061491-Glendon%20Smith%20%3Cunevieenrouges%40gmail.com%3E&_=wF4i

I get the same error message in that it could not be added to the blacklist.

we are investigating.

Spam stopped for over 12 hours but we got over 100 spam messages since 9:30 AM EST.

We are getting lots of spam now from 93.92.76.xxx and 93.92.77.xxx.

It appears the spammers are always going to a new set of IP ranges.

Would blocking 93.92.xxx.xxx solved the daily resurfacing of new spam after a few hours of setting a previous block on an IP range?

We have blocked all the IP ranges that italian cloud supplier owns.