Steve Posted November 11, 2018 Share Posted November 11, 2018 https://www.spamcop.net/sc?id=z6499662004z6a4c2335c60773ff37fb0f7668385d6dz Parsing header: host 2001:12f0:601:a902:0:0:0:150 = turquesa.dcc.ufmg.br (cached)turquesa.dcc.ufmg.br is 2001:12f0:601:a902:0:0:0:150 0: Received: from smtp.dcc.ufmg.br (turquesa.dcc.ufmg.br. [2001:12f0:601:a902::150]) by mx.google.com with ESMTP id a44si116985qvh.91.2018.11.11.09.04.47; Sun, 11 Nov 2018 09:04:49 -0800 (PST) Hostname verified: turquesa.dcc.ufmg.brGmail/Postini received mail from sending system 2001:12f0:601:a902:0:0:0:150 1: Received: from webmail.dcc.ufmg.br (xisto.dcc.ufmg.br [2001:12f0:601:a902::150]) by smtp.dcc.ufmg.br (Postfix) with ESMTPS id E90409F094; Sun, 11 Nov 2018 15:04:46 -0200 (-02) Hostname verified: xisto.dcc.ufmg.br Possible forgery. Supposed receiving system not associated with any of your mailhosts Will not trust this Received line. Tracking message source: 2001:12f0:601:a902:0:0:0:150: Display data:"whois 2001:12f0:601:a902:0:0:0:150@whois.lacnic.net" (Getting contact from whois.lacnic.net)Backup contact owner-c = rco217Using NS name gerencia.rede.ufmg.br to find domain and contact Display data: "whois rede.ufmg.br@whois.nic.br" (Getting contact from whois.nic.br) Backup contact owner-c = ura ura = r-admin@rede.ufmg.br urt = r-tecnic@rede.ufmg.br whois.nic.br rede.ufmg.br = r-admin@rede.ufmg.br, r-tecnic@rede.ufmg.br, mail-abuse@cert.brsic128 = cais@cais.rnp.brwhois.lacnic.net found abuse contacts for 2001:12f0:601:a902:0:0:0:150 = cais@cais.rnp.br Cannot find ip range in whois output No reporting addresses found for 2001:12f0:601:a902:0:0:0:150, using devnull for tracking. Yum, this spam is fresh! Message is 2 hours old2001:12f0:601:a902:0:0:0:150 not listed in cbl.abuseat.org2001:12f0:601:a902:0:0:0:150 not listed in dnsbl.sorbs.net2001:12f0:601:a902:0:0:0:150 not listed in accredit.habeas.com2001:12f0:601:a902:0:0:0:150 not listed in plus.bondedsender.org2001:12f0:601:a902:0:0:0:150 not listed in iadb.isipp.com Finding links in message body Parsing text partno links found Reports regarding this spam have already been sent: Re: 2001:12f0:601:a902:0:0:0:150 (Administrator of network where email originates) Reportid: 6876124444 To: nomaster@devnull.spamcop.net If reported today, reports would be sent to: Re: 2001:12f0:601:a902:0:0:0:150 (Administrator of network where email originates)nomaster@devnull.spamcop.net 2nd report using 3rd Rcvd line in header: https://www.spamcop.net/sc?id=z6499662490z5bdb0567e14f44de3e07c2fbad0f6158z Parsing header: 0: Received: from smtp.dcc.ufmg.br (turquesa.dcc.ufmg.br. [150.164.0.133]) by mx.google.com with ESMTP id a44si116985qvh.91.2018.11.11.09.04.47; Sun, 11 Nov 2018 09:04:49 -0800 (PST) Hostname verified: xisto.dcc.ufmg.brGmail/Postini received mail from sending system 150.164.0.133 1: Received: from webmail.dcc.ufmg.br (xisto.dcc.ufmg.br [150.164.0.133]) by smtp.dcc.ufmg.br (Postfix) with ESMTPS id E90409F094; Sun, 11 Nov 2018 15:04:46 -0200 (-02) Hostname verified: xisto.dcc.ufmg.br Possible forgery. Supposed receiving system not associated with any of your mailhosts Will not trust this Received line. Cached whois for 150.164.0.133 : search-apnic-not-arin@apnic.netI refuse to bother search-apnic-not-arin@apnic.net. Using search-apnic-not-arin#apnic.net@devnull.spamcop.net for statistical tracking. Using last resort contacts search-apnic-not-arin#apnic.net@devnull.spamcop.net Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.