SpamCop.net
Description: Beware of cheap imitations! SpamCop has been protecting the internet community since 1998. Automatically file spam reports with the network administrators who can stop unsolicited email at the source. Subscribe, and filter your email before it reaches your inbox.
Keywords: SpamCop original spam cop email filter abuse header headers parse parser utility script net net-abuse filter mail program system trace traceroute dns

Help | Site Map
| Text size: - +
SpamCop v 5.4.0 © 2021 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6728333544zfadf3621d490ea840a52ae9b28e37703z
Skip to Reports

    Received: from 10.196.243.13
     by atlas317.free.mail.bf1.yahoo.com with HTTPS; Fri, 29 Oct 2021 18:31:11 +0000
    Return-Path: <reject@bemimob.com.br>
    X-Originating-Ip: [5.196.136.237]
    Received-SPF: pass (domain of bemimob.com.br designates 5.196.136.237 as permitted sender)
    Authentication-Results: atlas317.free.mail.bf1.yahoo.com;
     dkim=perm_fail header.i=@bemimob.com.br header.s=default;
     spf=pass smtp.mailfrom=bemimob.com.br;
     dmarc=pass(p=QUARANTINE) header.from=bemimob.com.br;
    X-Apparently-To: x Fri, 29 Oct 2021 18:31:11 +0000
    X-YMailISG: dx0kEPoWLDuypNS4NQ.HCj7CUEK2T_SC.REhD8KCH30sWKM7
     6JGAdgsJD1tvuvy4uC4we_aDJTAASl9UFXAHevuKvcF4NKJ68p6TFk52h2oU
     keBrnJZreadcqVZIYsgAfamuoK9nzPueUgSaNubcdI3BX5kXcG47UCaDxwGE
     QKFY_GKa2dilb.jBJdN_XWVt96jDEIvKPsgJ9hTCrXnp1VjS74ekaAIUNHgr
     J8Yg4b8hWDDmSx8FHOzIl.wcvqjRy9BV93TGP9xh5ZDwzuXB8YUE2.P1s_lc
     gCaLFAFDVGtYyedzSYL6dSck17lnofFnbhaDufb1xBtqjjVbEPfD2zOWs9AF
     XgLzxTR3b_sSj01xAmWxVqNFmvm3za6usKH83DJeZiXRvOmBFYrp_iB3X0Im
     nvD4xhrEeZ7tMJPLJD5PMZK8kRJYoIYBfy5EZPBti753IQU2GZ.JOccV9ash
     YpIR1SAdGyzEdOMg1opDTdFsSSCeOYl34UAmOJ84.S6m.Md5x7hWf21bGs._
     sdWpwSRRwYZ4QwBXz6rXNRCRBX.jB3qQLzwE5uCNDmovetS7eYVtD.dWYkyv
     TMtJXQzQKc_G7GervuqsXcP3FDC.QdKJxhQs3NuXWEqU2v3_aIUWYvRy.DbY
     9_dI9A9psq.5HRbea2gUYuuPre2wJoLBlegyCAXBraBZ0CkF5H268Vs0rSX2
     Pl94lJep.BbvAmAZXSMawQG3216tlJ42RkmNDXWMlz_2.UFdUOMU3cMgxdDS
     l3QfDhTs_.T4KdJpidh8_3ngnS7hjcoUl7mQtM_0YV8woHOUkRMT6_AbyFFw
     E_lVHvQLH1RW2diOuaPs9E0XCrVIMYTMcfz7qGFpGjUaY3YLt4jVlV0Me6iG
     Cqyv5Y1s2bzA_Iff11iiMxe8HqAHsCwg3EbZunad_9SojOEwvnhDlHS4__rb
     WxPV7mEvl83xTbV2kLxQnDanQeUabXst2oE1nh10tWinuYaIBQzQI9yQ5Y2r
     fuQVqBb1PmPVA8ouxjVr_7nMJwHHHUqY0zEhViKdM.9sUB4NcHmB5qI72DCo
     F394R.I4atlq8AL_LHVk0sEPJcvlpjEvuvYcbQjIeog-
    Received: from 5.196.136.237 (EHLO mta0.bemimob.com.br)
     by 10.196.243.13 with SMTP;
     Fri, 29 Oct 2021 18:31:11 +0000
    DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=default; d=bemimob.com.br;
     h=To:Subject:Message-ID:Date:From:Reply-To:MIME-Version:List-Unsubscribe:Content-Type:Content-Transfer-Encoding; i=abuse@bemimob.com.br;
     bh=+iHzIg2USba01WjO7tpzByqbiiA=;
     b=x/ybtXwbR59mSxdXOYG1yRmZ7OQWQISu2uGe6QmcYstzFays4laAuwRleh2qn49b5ncQ4MZM/cu7
       P2cNScLHmSC7SsbKh6CgJ5jK3vALPkDzjFUEuTr9x/V2mgN3nWOn/vj+Bpu2fvxV4+HiSBcM09S7
       Wcd8doKK7zeSgSJDEl0=
    To: x
    Subject: =?UTF-8?B?QnJldmUgTGFuw6dhbWVudG8gQ2FzYSBkbyBBdG9y?=
    Message-ID: <2737________________________f0d9@bemimob.com.br>
    Date: Fri, 29 Oct 2021 16:05:26 +0000
    From: "=?UTF-8?B?VG9nbmF0byAtIEJlbSBJbW9iaWxpw6FyaWE=?=" <tognato@bemimob.com.br>
    Reply-To: tognato@bemparcerias.com.br
    MIME-Version: 1.0
    X-Mailer-LID: 29,30,23,28,25,24
    List-Unsubscribe: <https://bemimob.com.br/emkt/unsubscribe.php?M=1759364&C=da6e868ae50b14b880bbf707baa6c7cd&L=24&N=94>
    X-Mailer-RecptId: 1759364
    X-Mailer-SID: 94
    X-Mailer-Sent-By: 2
    Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_26676889acbe3451079e0b567bd9271f"
    Content-Transfer-Encoding: 8bit

View entire message
Parsing header:
0: Received: from 10.196.243.13 by atlas317.free.mail.bf1.yahoo.com with HTTPS; Fri, 29 Oct 2021 18:31:11 +0000
Internal handoff at YahooMain
1: Received: from 5.196.136.237 (EHLO mta0.bemimob.com.br) by 10.196.243.13 with SMTP; Fri, 29 Oct 2021 18:31:11 +0000
Hostname verified: mta0.bemimob.com.br
YahooMain received mail from sending system 5.196.136.237
Tracking message source: 5.196.136.237:
Routing details for 5.196.136.237
[refresh/show] Cached whois for 5.196.136.237 : abuse@ovh.net
Using abuse net on abuse@ovh.net
abuse net ovh.net = abuse@ovh.net, noc@ovh.net
Using best contacts abuse@ovh.net noc@ovh.net
Yum, this spam is fresh!
Message is 2 hours old
5.196.136.237 not listed in cbl.abuseat.org
5.196.136.237 not listed in dnsbl.sorbs.net
5.196.136.237 not listed in accredit.habeas.com
5.196.136.237 not listed in plus.bondedsender.org
5.196.136.237 not listed in iadb.isipp.com
Finding links in message body
Recurse multipart:
Parsing text part
Parsing HTML part
Resolving link obfuscation
https://bemimob.com.br/emkt/link.php?M=1759364&N=94&L=1&F=H
https://bemimob.com.br/emkt/display.php?M=1759364&C=da6e868ae50b14b880bbf707baa6c7cd&S=94&L=24&N=70
https://bemimob.com.br/emkt/unsubscribe.php?M=1759364&C=da6e868ae50b14b880bbf707baa6c7cd&L=24&N=94
Tracking link: https://bemimob.com.br/emkt/link.php?M=1759364&amp;N=94&amp;L=1&amp;F=H
[report history]
Host bemimob.com.br (checking ip) = 51.38.18.155
Resolves to 51.38.18.155
Routing details for 51.38.18.155
[refresh/show] Cached whois for 51.38.18.155 : abuse@ovh.net
Using abuse net on abuse@ovh.net
abuse net ovh.net = abuse@ovh.net, noc@ovh.net
Using best contacts abuse@ovh.net noc@ovh.net
Tracking link: https://bemimob.com.br/emkt/display.php?M=1759364&amp;C=da6e868ae50b14b880bbf707baa6c7cd&amp;S=94&amp;L=24&amp;N=70
[report history]
Host bemimob.com.br (checking ip) = 51.38.18.155
Resolves to 51.38.18.155
Routing details for 51.38.18.155
[refresh/show] Cached whois for 51.38.18.155 : abuse@ovh.net
Using abuse net on abuse@ovh.net
abuse net ovh.net = abuse@ovh.net, noc@ovh.net
Using best contacts abuse@ovh.net noc@ovh.net
Tracking link: https://bemimob.com.br/emkt/unsubscribe.php?M=1759364&amp;C=da6e868ae50b14b880bbf707baa6c7cd&amp;L=24&amp;N=94
[report history]
Host bemimob.com.br (checking ip) = 51.38.18.155
Resolves to 51.38.18.155
Routing details for 51.38.18.155
[refresh/show] Cached whois for 51.38.18.155 : abuse@ovh.net
Using abuse net on abuse@ovh.net
abuse net ovh.net = abuse@ovh.net, noc@ovh.net
Using best contacts abuse@ovh.net noc@ovh.net
If reported today, reports would be sent to:

Re: 5.196.136.237 (Administrator of network where email originates)
noc@ovh.net
abuse@ovh.net

Re: https://bemimob.com.br/emkt/display.php?M=17593... (Administrator of network hosting website referenced in spam)
abuse@ovh.net
noc@ovh.net

Re: https://bemimob.com.br/emkt/link.php?M=1759364&... (Administrator of network hosting website referenced in spam)
abuse@ovh.net
noc@ovh.net

Re: https://bemimob.com.br/emkt/unsubscribe.php?M=1... (Administrator of network hosting website referenced in spam)
abuse@ovh.net
noc@ovh.net