My blog

Month: December 2021

  • Spam to aol.com

    Some open relay spams a lot with this kind of messages:

    Delivered-To: abondarenko@gmail.com
    Received: by 2002:aa6:c2c8:0:b0:16a:1e8a:2c54 with SMTP id i8csp1735690lkp;
            Fri, 17 Dec 2021 09:01:32 -0800 (PST)
    X-Google-Smtp-Source: ABdhPJwYX2tMoVU+eJjTP1qslWMcUikk61IbaTmPrak3WWvb1fbofSlY0ftgYqX9WBAiH5rL/PIy
    X-Received: by 2002:a2e:bf1e:: with SMTP id c30mr3535718ljr.408.1639760491902;
            Fri, 17 Dec 2021 09:01:31 -0800 (PST)
    ARC-Seal: i=1; a=rsa-sha256; t=1639760491; cv=none;
            d=google.com; s=arc-20160816;
            b=Pp3pD2GTGMOH8vYn+zs+n31Y3/RsUhm8SrzMWHMf4MAqnnojNhRemwUANtHgYhjd/9
             M9F2iuIpJkYkdd5SqyzP2623PIWs8ahgMoEWWU5s9exmqAhICUtDc0BODLwWpzw1pbYi
             +XoA0yQkL79W+wWdCnn2D+EGR1LCr2dxnrH4A3OgsTTXG573/yQ3fAxMvT/qdSTCHf+X
             VtaHKSEHgU5vkfo20EF6hKF9h46d/KyaMspGtr4XhVeUPgvl3EWf/LilXOnbcctYH+q7
             Q2ys7jcbeyltrTxwhVhJAy0gUu2ozZvSYh1SqR5MeWSbIb5/ClGinRy5cg5nimLi2jig
             G2Qg==
    ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
            h=list-id:date:subject:mime-version:from:references:message-id
             :in-reply-to:cc:sender:to;
            bh=NGzDzdcewllnPBsamgVTFKJA29B6AKbdLi/8YHAavI4=;
            b=TMnHqx8tOJuZqLu9T8zJeVqCHf7smy3gfUcaNpwZXAh/b+WUewtSpgMGFFCyq99Q1f
             onjlP1gOa8+bf6lFbke9NTi4lJIclGzgZpehfAuSoqYPvOZb6rxuJJG+CPDqYMtS68ah
             JGSbWjAxFMWfyBju3iapWIraB6JDIcK1zAKMdQnH6hD9CwFYpGw0LcDPSXGnYmu6ZdEv
             28GPBTJEtT4jQ6aXuOSRX2fTxrZq2nnrR9CJ1L/qFnTfa1czf4VlCzRmfQUC6CFPPv78
             0lOgK3/r3FxbYqqTYU9ugM25xNh3CxB720wTrYUZESOXjpXo2HXM2xlox6CLU1QDrt5F
             Mgzg==
    ARC-Authentication-Results: i=1; mx.google.com;
           spf=neutral (google.com: 95.216.139.147 is neither permitted nor denied by best guess record for domain of noreply.tye@kojmpwphuzgk.com) smtp.mailfrom=noreply.Tye@kojmpwphuzgk.com
    Return-Path: <noreply.Tye@kojmpwphuzgk.com>
    Received: from coinednotes.club (static.147.139.216.95.clients.your-server.de. [95.216.139.147])
            by mx.google.com with ESMTP id p27si13564674lfa.84.2021.12.17.09.01.31
            for <abondarenko@gmail.com>;
            Fri, 17 Dec 2021 09:01:31 -0800 (PST)
    Received-SPF: neutral (google.com: 95.216.139.147 is neither permitted nor denied by best guess record for domain of noreply.tye@kojmpwphuzgk.com) client-ip=95.216.139.147;
    Authentication-Results: mx.google.com;
           spf=neutral (google.com: 95.216.139.147 is neither permitted nor denied by best guess record for domain of noreply.tye@kojmpwphuzgk.com) smtp.mailfrom=noreply.Tye@kojmpwphuzgk.com
    Received: from app19.muc.ec-messenger.com (app19.muc.ec-messenger.com )
      (envelope-from <g-3851351679-7322-354668012-1559235622088@bounce.news.mapp.com (g-3851351679-7322-354668012-1559235622088@bounce.news.mapp.com)>)
      by gp13mtaq123 (mtaq-receiver/2.20190311.1) with ESMTP id yA3jJ-_S5g8Z
      for <maizeseven@comcast.net>; Thu, 30 May 2019 19:00:22 +0200
    Received: from www.takataka.gr (realshop.gr )
      by uat.atnet.gr (Postfix) with ESMTPA id 24BF957C2E58
      for <daily.fast@aol.com>; Wed, 29 May 2019 20:27:11 +0300 (EEST)
    To: <abondarenko@aol.com>
    Sender: support.S2quNYj43Z.673059
    CC: <abondarenko@aol.com>
    In-Reply-To: <CADT5qSj0REQQpwKiW6P5cL27kFYMN9CKrxS2quNYj43Z46NH1Cu5OuqVwXww@nzv.Americans Urged To Take Advantage Of Today’s Low Rates>
    Message-ID: <ZF3lf1bGTw-Ct-Y9ADdPrxQfxtw8L0vHg-95.216.139.147@ismtpd0003p1iad1.sendgrid.net>
    References: <----=_Part_zxX5LNJYyq8_2925087682796.s-east-2.amazonawzxX5LNJYyq8@>
    Content-Type: multipart/Digest; boundary="----=_Part_zxX5LNJYyq8_2925087682796.s-east-2.amazonONj3L3voxQenV"
    From: "`V.i.v.a-loan`@#" <wmu2NhS-rxQfxtw8L0v-noReply@kojmpwphuzgk.com>
    MIME-Version: 2.0
    Subject: Get_up.to-$15,000 just~in.time.for-Christmas!``357`
    Date: [Date]
    List-ID: <6417211.xt.local>
    
    

    Google mail does not treat this as spam, but I can just drop all mail to abondarenko@aol.com. Interesting!