Not sure if anything can be done. I reported the website last week - and no response.
So - here is the site: http://www.ttueventos.com.br/qwd123/pic
And here's the header info:
Return-Path: <[email protected]>
Received: from mi01-ssvc.dcs.int.inet (LHLO mi01.dcs.int.inet)
(10.0.153.210) by cds221.dcs.int.inet with LMTP; Fri, 17 Jan 2020 02:32:15
-0700 (MST)
Received: from sered.net ([208.97.140.126])
by cmsmtp with ESMTP
id sNzBiXhvNcz1dsNzCic1qQ; Fri, 17 Jan 2020 02:32:15 -0700
Authentication-Results: mi01.dcs.int.inet;
dmarc=fail header.from=sered.net
X-Authority-Analysis: v=2.3 cv=aKSOVo1m c=1 sm=1 tr=0 cx=a_idp_d
a=3KCDF7rOSm9QOmHiAIEoCQ==:117 a=3KCDF7rOSm9QOmHiAIEoCQ==:17 a=Fdc6JvbgAAAA:8
a=Rdl4fSI-AAAA:8 a=8t1E-5qKAAAA:8 a=Ez1vHJKIAAAA:8 a=QvtYoQlsQW3undfEY1AA:9
a=Um5_ECLf6tUIRuAk:21 a=CtwYUWYd4OMi47MQ:21 a=kByDvTauAbszR7nb:21
a=_W_S_7VecoQA:10 a=qicGD3WQl8hCW7KzFE2M:22 a=0U_tu8wn2sE9eueZTpq6:22
a=-DyLCWkahjbFEOI8c06m:22 a=7ZKaNbEz-gM0j547dy8T:22 a=pHzHmUro8NiASowvMSCR:22
a=nt3jZW36AmriUCFCBwmW:22
From: Brynn Doyle <[email protected]>