karl Posted April 14, 2021 Share Posted April 14, 2021 (edited) hi, https://www.spamcop.net/sc?id=z6709299384zf0eb9aafb40322835a2cdcc8a2ffe3f8z as far as I can see there is nothing wrong in the received headers. the latest 2 are clearly marked as local (LMTP) and should be ignored, the earliest has a private address and is correctly discarded . there is one single relevant received header which states 126.96.36.199 is the receiving MX 188.8.131.52 is the sending smtp client (MSA). but the sender is discarded as a forgery and the edge server is used for reporting. also percent unescape renders to http://www.w1xwatx.weebly.com/&sa=D&sntz=1&usg=AFQjCNHIHaze9cNpek8Eev5KOBBqkJPuaA so it should be reported to weebly.com: firstname.lastname@example.org. the spammers first server is blacklisted, I can't report their second one. I don't know what went wrong. cheers karl Edited April 14, 2021 by karl typo Quote Link to comment Share on other sites More sharing options...
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.