> On Sep 15, 2015, at 7:14 AM, Rich Kulawiec <r...@gsp.org> wrote:
>
> I've seen a noticeable uptick in (obvious) spam from the following
> similarly-named servers in the last 60 days:
You left off mail-bn1hn0247.outbound.protection.outlook.com
Return-Path: <mailer-dae...@pennzoil.gizmopartners.com>
Received: from na01-bn1-obe.outbound.protection.outlook.com
(mail-bn1hn0247.outbound.protection.outlook.com [157.56.110.247])
by pennzoil.gizmopartners.com (8.14.4/8.14.4) with ESMTP id
t8FCEUw3031966
(version=TLSv1/SSLv3 cipher=AES256-SHA256 bits=256 verify=OK)
for <cb...@gizmopartners.com>; Tue, 15 Sep 2015 07:14:33 -0500
Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=<>;
Received: from [100.74.187.43] (101.59.64.219) by
BLUPR18MB0258.namprd18.prod.outlook.com (10.162.236.149) with Microsoft SMTP
Server (TLS) id 15.1.268.17; Tue, 15 Sep 2015 10:53:26 +0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Description: Mail message body
Subject: Dear Beneficiary, Kindly read this message and get back to me.
To: recipie...@pennzoil.gizmopartners.com
From: <>
Date: Tue, 15 Sep 2015 16:23:09 +0530
Reply-To: <morganhenr...@gmail.com>
X-Antivirus: avast! (VPS 150915-0, 09/15/2015), Outbound message
X-Antivirus-Status: Clean
X-Originating-IP: [101.59.64.219]
X-ClientProxiedBy: HKNPR06CA0035.apcprd06.prod.outlook.com (10.141.16.25) To
BLUPR18MB0258.namprd18.prod.outlook.com (25.162.236.149)
Message-ID:
<blupr18mb025834177a4804866842bd0eb8...@blupr18mb0258.namprd18.prod.outlook.com>
X-Microsoft-Exchange-Diagnostics:
1;BLUPR18MB0258;2:zzwkLiNoaaLdB6v5/6xRmRYRXo6iJoLqmVUJGqlxW9hr3NFgSAEKvQvFS7KGd56oBg11lB5ZkXWK/QfUZ5TeK+gfCkgzQXh5f3jTv0zba49QpWMyUPl1U5SJfiv0NLrsPtl1U6xZqknrW0htXn++r0H198iXBbE5hsfrbs8sjsg=;3:j6rDFZfNz/qGwAouI58oBo1pA4qcPNsMcvc1nBMublTSq0KGLSlaRhqEEAYWmLo2reTmEX4ff6bWZKeCKe6iCATblXMCaNW3MLPBDviKinZvNDJKcEwZFHGsJ3bKLFLxxjgpV3nqv8I7k2tBXa6VTQ==;25:BqGKFDPgfLAO7LWFW3/u1jmkjxvnqOtWcShZAIdH7fGO8ATqF3dXJx3xqPGeVKdhhjgsznBci5U2FodkHypAvPDsXYrApj/nI9NIJn+iUovcG4h2oQVR8a9cxQWYQW1CwKSL+rpVRkoZXW31WK1kwgBpdexoYV5O7fV+zlzecOO/E/+D4K0qtXKESOxjz39mVI2oZA6J8oVXIZ66+kfpWLCtAjCTln0yYu9wTcwRrDYPd5+xLS2/1Shi3PK4j/h9ukTXvFxAkhSnfltirGXftg==
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BLUPR18MB0258;
X-Microsoft-Antispam-PRVS:
<blupr18mb02588e34525fb202d9beb032b8...@blupr18mb0258.namprd18.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test:
BCL:0;PCL:0;RULEID:(601004)(8121501046)(520075)(5005006)(520078)(3002001);SRVR:BLUPR18MB0258;BCL:0;PCL:0;RULEID:;SRVR:BLUPR18MB0258;
X-Microsoft-Exchange-Diagnostics:
1;BLUPR18MB0258;4:AmqptwkWLFaSXQkbeqZ7W5QwCOMe8a8fyt5T1ogzNaDSEGWWhYZ7ZLsPNMeIJ7MzgVDu83GyErjBphaVuiJTqZJVIm91jh04cezF0Mv5xBv5oaTYYFxfuHO/by3QXaGmFGQNzp9KXKkSunxy8AzoE/6uTlwNKM63xbYCqtfWTu+Hn8cwtbWJfAyppjSBvElfvXU+1Gh6uw3zfl+o17gC1NQ4CX6DA63Y2p6u7ebMOrgFVphJR4Yygf+ikYztaOIC7S1XYO5eZdvCV4evkzJGauagndFvYx0b0u1surlZNKX5q0r/BqKhvtgc97ZaCqlFtNzCc81SKkxv9g8zDRpt51gvsQ/4F6Y9aSBZE2yuPfY=
X-Forefront-PRVS: 070092A9D3
X-Forefront-Antispam-Report:
SFV:SPM;SFS:(10009020)(6049001)(6009001)(199003)(189002)(78352002)(229853001)(4001450100002)(86362001)(53256004)(19580405001)(50466002)(68736005)(110136002)(5007970100001)(4001600100001)(5005630100001)(250100001)(74316001)(97736004)(4001540100001)(5001960100002)(189998001)(76576001)(77096005)(5001830100001)(77156002)(122386002)(109986003)(5004730100002)(81156007)(107886002)(62966003)(40100003)(19580395003)(5001920100001)(33656002)(325944007)(105586002)(5001860100001)(66066001)(64706001)(43066003)(47776003)(42186005)(86152002)(50986999)(42382002)(101416001)(85782001)(106356001)(46552002)(53806999)(46102003)(54356999)(23756003)(87976001)(525674003);DIR:OUT;SFP:1501;SCL:5;SRVR:BLUPR18MB0258;H:[100.74.187.43];FPR:;SPF:None;PTR:InfoNoRecords;A:0;MX:0;LANG:en;
Received-SPF: None (protection.outlook.com: [100.74.187.43] does not designate
permitted sender hosts)
X-Microsoft-Exchange-Diagnostics:
=?iso-8859-1?Q?1;BLUPR18MB0258;23:oEpMtwrJjWFoyfL3olrMLZAKg94RJrOg4bzbC7c?=
=?iso-8859-1?Q?Gzjc+kDgUOvEVJVnv9NEJraq8vz38N6HbXWuViU+zANaAuQp60XIOxaUKF?=
=?iso-8859-1?Q?sUVYr6Yb3eFvK2PN3aA47cC4bcolbuSXDt0UC/jYCnXaQYaSb3ive9DvpD?=
=?iso-8859-1?Q?jlQm3hO065IOdMwTywib50UVpK9k1+B94vfcDR3XQ1binaNPqED6ZJO4OG?=
=?iso-8859-1?Q?6osuPOf+oKQEg88tA7TVBBce46K/2R1M2o1dI+MkIkT26rNS5p/Si/WycA?=
=?iso-8859-1?Q?dxrO+OjARs6+kJpWAhKzgoaLZf9XwRn4haOkdF4WwoLflASRlkVNHTVEzI?=
=?iso-8859-1?Q?MHA2muHRJF/jlf1/uII5MrnxiMqtllC/Vy3El2WonTyJCh+/pjLijaprJL?=
=?iso-8859-1?Q?Wk8uAhZ0eaU9x2uU3kmxul+DM+DHJLCAdcj02J7IOQD8TfeVgLr2lY4/He?=
=?iso-8859-1?Q?iKe7cZDjkKwRML481ZK/3cWaX1hwcZK1bshxQQc+tjMxKJ9jaIqZk+CISN?=
=?iso-8859-1?Q?4Zc1XmPVDmdcbPpHX1BCp+hjftZoCkFz0PCs9zt2QCOvocaVeYLS+Ztlgq?=
=?iso-8859-1?Q?/zMPIGEZ4gXuvYjFRWO2PNofJ2I0z5OKVHeSEwMAPOj7GnZgQOnImwJzgj?=
=?iso-8859-1?Q?+tdfKYsmz9ECV9TsQm81zFgsItUN/7eyuqfoVNpCULJXCfa1/gng0g0klq?=
=?iso-8859-1?Q?kjQJiU1ucBiMuX5QeHAxG/plVbEL9EjW7934CItmCwkYnmN3jhcJSQnMoD?=
=?iso-8859-1?Q?gVxAUSzt0PnyN4asGkY4Ajdr9lf1dZTgimE955vrIIdPHrtAyqOiDU1R2h?=
=?iso-8859-1?Q?vz6TYiqSCjVtp/rmIVD0y965LDaB34y/S9+f2/8O+1ruq3Eox7dy45ghbH?=
=?iso-8859-1?Q?sOiPBY01bnU/QjZMS8P/k5JQLEpLbwHbL8Pz2oDvQnj7xDSwNgVUeuefV7?=
=?iso-8859-1?Q?WtULI5SrWIPMvO/iR/uc9ZLH0vWRsQkd/fIQEivZeGmtXPpLUhiGZeYCuU?=
=?iso-8859-1?Q?eO4u8tp1qVtZ6klqG1rGOV0TAL4BQ/ZXqLW8aEybevyNjmXoalSXybzuN2?=
=?iso-8859-1?Q?fBKKIXA/pznQt5AjfhUcm6cRCYKKr7KqSjLHnAGYXJpbkRGmk7or7axUZ7?=
=?iso-8859-1?Q?WJo00Q9CZJqRFHggux1Z0yGIFsebDh3LACznxuLkArdNvqatSqE4W67xor?=
=?iso-8859-1?Q?S5JQduJ1aTepcJmR8UbUmuIGryXcvkuLCl4VfW6I/w5Kpfo4Rlc/8Skk6e?=
=?iso-8859-1?Q?lBvwJrOyG4ThCihrHIuEfee1cEv5vIB1b1fgyEEq4OhQsCs+i4otlOe/Vu?=
=?iso-8859-1?Q?M/A6GFdYbz5V3FjoVQne8+J5dk9mrqxVs0rI7WYxUhYD/zDYTHV6GGSd69?=
=?iso-8859-1?Q?25dhjxVIb77YbZx15vdfYM34Whhi+49VP6B5C7eYrtmYeXf+2yrnHrhhQN?=
=?iso-8859-1?Q?UFz0M/7H5Bz4swxL86ZykCWfdE6mLHqGYRnhrnTzyYETn317/aCADbhYC8?=
=?iso-8859-1?Q?yjveTrvR4BSr3ZniICLF348docZoIxsTMBsZI22U1+b11MQQ2Il2RrEGHC?=
=?iso-8859-1?Q?gErE7ydgM1eT9mHnMdNdEVn1fk=3D?=
X-Microsoft-Exchange-Diagnostics:
1;BLUPR18MB0258;5:tUdy3gv6ireUh6BKMwgu2pTi3RAJ8QnQiL9bZ9owBVRknFx2aq2aGzcdQ994+91tjlgmhnNRngjJ4OX50MfN4JJrr0uH72gj3tC6XBZrWbVRD7vIxsK1t8CWVMop5S3UgeKIO1psJRB/6GK0uYneqQ==;24:cTWMxYaNyQWmVb7iBYceTJ9y9IcOPvrZU9TWKsV7HYOSKpGafjP3Pas0gY9J275yL5tMoKwVxyfaHD7UOg0tzQ==;20:QJRoWVd4JMs1AnYtAaq0ZD853Re75XJKCPHJXI/g7K1DdvsYDtkEl8BJKlOE7NMNXVdAu4GjZFFnaCBMm5ZgLA==
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: 00000000%2D0000%2D0000%2D0000%2D000000000000
X-OriginatorOrg: officemee.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Sep 2015 10:53:26.6276
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLUPR18MB0258
X-Greylist: Delayed for 01:30:32 by milter-greylist-4.2.7
(pennzoil.gizmopartners.com [208.81.246.20]); Tue, 15 Sep 2015 07:14:33 -0500
(CDT)
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by
pennzoil.gizmopartners.com id t8FCEUw3031966
Dear Beneficiary,
This is to officially inform you that we have written to you before
_______________________________________________
mailop mailing list
mailop@mailop.org
http://chilli.nosignal.org/mailman/listinfo/mailop
