I recently received a spam (see bellow) from a french e-commerce company (which I don't have an account on it) asking me for my personal address because I won a wonderful price.
This is the link provided to me in order to specified my address in the mail. I didn't click it, and I removed a
http bellow for disabling the link on the site.
This is probably a bad website, beware if you want to reach it!
Moreover, in the mail, there are a lot of images with the same kind of link. (Thx to thunderbird for disabling retrieving the remote images). As I understand those links, google will redirect me to a website (www.wholesalejaipurkurti.com) which has definitely been corrupted.
Received part in the Source code of the mail:
Received: from AM3PR07MB1138.eurprd07.prod.outlook.com (10.163.188.12) by VI1PR07MB1149.eurprd07.prod.outlook.com (10.163.168.146) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.587.9 via Mailbox Transport; Sun, 21 Aug 2016 03:00:52 +0000 Received: from HE1PR0701CA0001.eurprd07.prod.outlook.com (2603:10a6:3:5::11) by AM3PR07MB1138.eurprd07.prod.outlook.com (2a01:111:e400:536f::12) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384) id 15.1.549.15; Sun, 21 Aug 2016 03:00:52 +0000 Received: from HE1EUR01FT007.eop-EUR01.prod.protection.outlook.com (2a01:111:f400:7e1f::204) by HE1PR0701CA0001.outlook.office365.com (2603:10a6:3:5::11) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384) id 15.1.587.9 via Frontend Transport; Sun, 21 Aug 2016 03:00:51 +0000 Received: from BAY004-MC1F53.hotmail.com (10.152.0.57) by HE1EUR01FT007.mail.protection.outlook.com (10.152.1.243) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.577.8 via Frontend Transport; Sun, 21 Aug 2016 03:00:51 +0000 Received: from mout.perfora.net ([22.214.171.124]) by BAY004-MC1F53.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143); Sat, 20 Aug 2016 20:00:44 -0700 Received: from web02-03 ([126.96.36.199]) by mrelay.perfora.net (mreueus002) with ESMTPA (Nemesis) id 0LsS5u-1b8wK21Z5k-011y0d for <MYADDRESS>;
CMM-sender-ip: 188.8.131.52 CMM-sending-ip: 184.108.40.206 CMM-Authentication-Results: hotmail.com; spf=none (sender IP is 220.127.116.11) email@example.com; dkim=none header.d=webmail.123-reg.co.uk; x-hmca=none firstname.lastname@example.org CMM-X-SID-PRA: email@example.com
Note: I removed my real email address, and changed it with "MYADDRESS".
18.104.22.168 has already been reported as SPAM here.
What can I do in order to report this spam? to whom (email provider, website administrator...)? I have some ideas, but I prefer to be sure before reporting anything.