<html> <head> <meta content="text/html; charset=utf-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <div class="moz-cite-prefix">On 9/27/2015 10:31 AM, peter h wrote: </div> <blockquote cite="mid:201509271931.08709.peter@hk.ipsec.se" type="cite"> <pre wrap=""> Please tell us what IP has been spamming, is it 178.77.237.135 ( which happens to be a czech network. My traceroute stops at 77.48.106.250 which seems to be located in UPC Czech</pre> </blockquote> Yes, and if you do a lookup on the IP address you would get the following inetnum: 178.77.237.0 - 178.77.237.255 netname: EMAILAG descr: inflr.com.br country: CZ admin-c: ZK896-RIPE tech-c: ZK896-RIPE status: ASSIGNED PA remarks: ********************************************** remarks: * Please send abuse notifications to: * remarks: * <a class="moz-txt-link-abbreviated" href="mailto:abuse@tech.inflr.com*">abuse@tech.inflr.com*</a> remarks: ********************************************** mnt-by: SLOANE-MNT created: 2015-07-30T13:35:15Z last-modified: 2015-09-01T07:59:56Z source: RIPE Whether they'll do something about it or not is an open question, but .. Arnold PS: I highly recommend the SPAM reporter wxSR PPS: blowing my own horn just a bit :-) <blockquote cite="mid:201509271931.08709.peter@hk.ipsec.se" type="cite"> <pre wrap=""> peter h On Sunday 27 September 2015 18.46, Marilson wrote: </pre> <blockquote type="cite"> <pre wrap=""> From: Marilson Sent: Sunday, September 27, 2015 1:16 PM To: <a class="moz-txt-link-abbreviated" href="mailto:abuse@upcbroadband.cz">abuse@upcbroadband.cz</a> Cc: <a class="moz-txt-link-abbreviated" href="mailto:abuse@tech.infr.com">abuse@tech.infr.com</a> ; <a class="moz-txt-link-abbreviated" href="mailto:lubos_hutar@mirovka.net">lubos_hutar@mirovka.net</a> ; <a class="moz-txt-link-abbreviated" href="mailto:abuse@godaddy.com">abuse@godaddy.com</a> ; <a class="moz-txt-link-abbreviated" href="mailto:abuse@gmail.com">abuse@gmail.com</a> ; <a class="moz-txt-link-abbreviated" href="mailto:anti-abuse-wg@ripe.net">anti-abuse-wg@ripe.net</a> ; <a class="moz-txt-link-abbreviated" href="mailto:midmail.co@domainsbyproxy.com">midmail.co@domainsbyproxy.com</a> ; <a class="moz-txt-link-abbreviated" href="mailto:descontosurpresa@cupomvip.com">descontosurpresa@cupomvip.com</a> Subject: A spammer hidden This domain's registrant is hidden by a domain privacy service. Domain privacy is a service offered by a number of domain name registrars that allows a domain registrant to hide their identity from public domain name records. ISP does not wish to receive reports regarding <a class="moz-txt-link-freetext" href="http://www.descontosurpresa.com.br">http://www.descontosurpresa.com.br</a> - no date available. This registrant has two websites - <a class="moz-txt-link-abbreviated" href="http://www.descontosurpresa.com.br">www.descontosurpresa.com.br</a> and <a class="moz-txt-link-abbreviated" href="http://www.360midia.com.br">www.360midia.com.br</a> . All contacts on both websites are fake, don’t work. They are hidden for the illicit practice with the complicity of your ISP and Registar. And no one does anything. Spammers and who sends phishing and virus are hidden... What is the difference between these providers and an armed robber? Well, the thief is not a coward. Marilson HEADER Delivered-To: <a class="moz-txt-link-abbreviated" href="mailto:marilson.mapa@gmail.com">marilson.mapa@gmail.com</a> Received: by 10.103.43.68 with SMTP id r65csp367699vsr; Fri, 25 Sep 2015 21:24:11 -0700 (PDT) X-Received: by 10.194.11.37 with SMTP id n5mr10924491wjb.71.1443241451183; Fri, 25 Sep 2015 21:24:11 -0700 (PDT) Return-Path: <a class="moz-txt-link-rfc2396E" href="mailto:bounce-94496-7576400-1676-452@bouncehandle.mailguess.com"><bounce-94496-7576400-1676-452@bouncehandle.mailguess.com></a> Received: from server135.midmail.co (server135.midmail.co. [178.77.237.135]) by mx.google.com with ESMTP id ke3si3312538wjb.176.2015.09.25.21.24.10 for <a class="moz-txt-link-rfc2396E" href="mailto:marilson.mapa@gmail.com"><marilson.mapa@gmail.com></a>; Fri, 25 Sep 2015 21:24:11 -0700 (PDT) Received-SPF: pass (google.com: domain of <a class="moz-txt-link-abbreviated" href="mailto:bounce-94496-7576400-1676-452@bouncehandle.mailguess.com">bounce-94496-7576400-1676-452@bouncehandle.mailguess.com</a> designates 178.77.237.135 as permitted sender) client-ip=178.77.237.135; Authentication-Results: mx.google.com; spf=pass (google.com: domain of <a class="moz-txt-link-abbreviated" href="mailto:bounce-94496-7576400-1676-452@bouncehandle.mailguess.com">bounce-94496-7576400-1676-452@bouncehandle.mailguess.com</a> designates 178.77.237.135 as permitted sender) <a class="moz-txt-link-abbreviated" href="mailto:smtp.mailfrom=bounce-94496-7576400-1676-452@bouncehandle.mailguess.com">smtp.mailfrom=bounce-94496-7576400-1676-452@bouncehandle.mailguess.com</a>; dkim=pass <a class="moz-txt-link-abbreviated" href="mailto:header.i=@cupomvip.com">header.i=@cupomvip.com</a>; dmarc=pass (p=QUARANTINE dis=NONE) header.from=cupomvip.com DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=Aug217161668357; d=cupomvip.com; h=Date:To:From:Reply-to:Subject:Message-ID:List-Unsubscribe:MIME-Version:Content-Type; <a class="moz-txt-link-abbreviated" href="mailto:i=descontosurpresa@cupomvip.com">i=descontosurpresa@cupomvip.com</a>; bh=bUIZMSrI79fEcFU9+zU7pOhZ9i8=; b=SvdQSTtSwO8EjXeLqTUdvFtLZLJ/Eakt54cBxzkhFkOmK+/rG9D62YmurBZh4hITpyRsB3jY83BQ 9i6GozG2UOuerdLa66U/C5VZojxd5VXnym4OSXXSPk7d32dFvRnqrMqzPO926gkm846kj0F//Y4k x/1yIK4M/VWCIgA3XKE70xRHudac0MyYfBvGFzF/rfowiuCetgweXMT1QzsNNv2SpVWHNoshA5WW 9cwjWgNdZ74IYqP67+oaQfj2i0hF61vSN5i7HRJXPkNdEU2GJ26mHoeldYnwFWypDQTRWQuoXyrr aip3fOE8S0AanN2eTGWLyAKuVRyaH82gWtYrzA== DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=Aug217161668357; d=cupomvip.com; b=kj8pGFQJ6omvtGFrDg9U3wE5qbD9ZexGojF5eZ96Mnc4A0/RRypVVFF/eIpseYbOQ7n+L2fi56Bu xua2PzAHIXDkp5xcsfBXpHwmQKLJIsqx/dBGu+IN7bCzpZnV5J3Cvvr3KXnB7igJbuUFGiGpQlSn myEK3EoTy1SrCYOrh5JknqdtyfJfWQQtDgmzNTneBUzUJcNWSMIy2t4NabY3mOaugyLHe6GHNtdB 9aeSSZTbuKLPd1F+LVAFR9GHo8oFC6ggRe/koSOTJTW2MIU4cLayv4qQLjKC63Co6E22AywprfEh lbC20pXRo5V3rpQ+DyxXKJc7OGSv61mmplU4XA==; Date: Fri, 25 Sep 2015 10:33:52 -0300 Return-Path: <a class="moz-txt-link-abbreviated" href="mailto:bounce-94496-7576400-1676-452@bouncehandle.mailguess.com">bounce-94496-7576400-1676-452@bouncehandle.mailguess.com</a> To: <a class="moz-txt-link-rfc2396E" href="mailto:marilson.mapa@gmail.com">"marilson.mapa@gmail.com"</a> <a class="moz-txt-link-rfc2396E" href="mailto:marilson.mapa@gmail.com"><marilson.mapa@gmail.com></a> From: Desconto Surpresa <a class="moz-txt-link-rfc2396E" href="mailto:descontosurpresa@cupomvip.com"><descontosurpresa@cupomvip.com></a> Reply-to: Desconto Surpresa <a class="moz-txt-link-rfc2396E" href="mailto:descontosurpresa@cupomvip.com"><descontosurpresa@cupomvip.com></a> Subject: Regata Calvin Klein - T-Shirt Aleatory - Mochilas Bagaggio e muito mais Message-ID: <a class="moz-txt-link-rfc2396E" href="mailto:861974867edf969a7ae160b4ddc71e41@localhost.localdomain"><861974867edf969a7ae160b4ddc71e41@localhost.localdomain></a> X-Priority: 3 X-Mailer: App2 X-Complaints-To: <a class="moz-txt-link-abbreviated" href="mailto:abuse@mailguess.com">abuse@mailguess.com</a> List-Unsubscribe: <a class="moz-txt-link-rfc2396E" href="http://mailguess.com/u.php?p=14n/rs/tff/s0/14g/rs"><http://mailguess.com/u.php?p=14n/rs/tff/s0/14g/rs></a>, <a class="moz-txt-link-rfc2396E" href="mailto:fbl@fbl.mailguess.com?subject=unsubscribe:14n-tff-bWFyaWxzb24ubWFwYUBnbWFpbC5jb20%3D-s0-ru-rs"><mailto:fbl@fbl.mailguess.com?subject=unsubscribe:14n-tff-bWFyaWxzb24ubWFwYUBnbWFpbC5jb20%3D-s0-ru-rs></a> X-MessageID: 14n-tff-bWFyaWxzb24ubWFwYUBnbWFpbC5jb20%3D-s0-ru-rs X-Report-Abuse: <a class="moz-txt-link-rfc2396E" href="http://mailguess.com/report_abuse.php?mid=14n-tff-bWFyaWxzb24ubWFwYUBnbWFpbC5jb20%3D-s0-ru-rs"><http://mailguess.com/report_abuse.php?mid=14n-tff-bWFyaWxzb24ubWFwYUBnbWFpbC5jb20%3D-s0-ru-rs></a> x-dkim-options: s=20150611;d=b.emailag.com.br X-SMTPAPI: {"unique_args":{"abuse-id":"14n-tff-bWFyaWxzb24ubWFwYUBnbWFpbC5jb20%3D-s0-ru-rs"}, "category":"campaign"} MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="b1_861974867edf969a7ae160b4ddc71e41" TEXT – hiperlink removed – URL: <a class="moz-txt-link-freetext" href="http://">http://</a> mailguess.com/ tl.php?p=14n/14g/rs/tff/s0/rs//http%3A%2F%2Fwww.paguri.com%2Fclient%2Foffer%2F99%3B25%3B119 From: Desconto Surpresa Sent: Friday, September 25, 2015 10:33 AM To: <a class="moz-txt-link-abbreviated" href="mailto:marilson.mapa@gmail.com">marilson.mapa@gmail.com</a> Subject: Regata Calvin Klein - T-Shirt Aleatory - Mochilas Bagaggio e muito mais Versão Web REGATA FURINHOS FRENTE PRETO Regata Calvin Klein Jeans feminina na cor preta, decote redondo, detalhe em couro sintético nas laterais, aplicação de silk com logo da marca... VER PREÇO T-Shirt Aleatory Estampada M/C Indigo VER PREÇO Mochila Com Rodas Swisswin Zurique É segura e resistente, feita de material à prova de rasgos e confortável para o transporte, devido ao carrinho embutido e alça telescópica... VER PREÇO clique aqui para descadastrar </pre> </blockquote> <pre wrap=""> </pre> </blockquote> <pre class="moz-signature" cols="60">-- Fight Spam - report it with wxSR 0.7 Vista & Win7 compatible <a class="moz-txt-link-freetext" href="http://www.columbinehoney.net/wxSR.shtml">http://www.columbinehoney.net/wxSR.shtml</a> </pre> </body> </html>