This spammer is spamming through the Gmail api, and GTT is the last 
identifiable hop to get to their google-hosted site. This is the 4th spam to 
this role account that we've received in the space of a week - we have now 
reported this spammer three times to Google, GTT and Sucuri (they are hosted by 
googledomains and 'protected' by Sucuri - Sucuri says they can't do anything 
because they are only a front-end protection), and monumetric continues 
spamming unabated.

So, please have fun, boys and girls.

P.S. between the time that I drafted this and am hitting send, we received a  
*5th* spam from them.

P.P.S.  So apparently registering and hosting with google, and adding a service 
like sucuri, is the golden egg to bulletproof spamming these days.

> Spencer Myers <spen...@monumetric.com <mailto:spen...@monumetric.com>> 
> Re: New Advertisers for www.theinternetpatrol.com/ 
> <http://www.theinternetpatrol.com/>
> To: There TBD <i...@theinternetpatrol.com 
> <mailto:i...@theinternetpatrol.com>> 
> X-Spam-Level: ⁨⁩
> X-Cmae-Envelope: 
> ⁨MS4wfICF2c7pV3yacZ7790CdB0Yrtccdy02jI25E6EvKgVf714nqXW3N8DU7qjcI7AhGn4no3HqIw+FTmnIVGQoxnlyJRrrLILTlNF8qWbktFnz25+DsLosQ
>  
> PRcomf5qF0h2w2Xu40CNrmfBKHlkq46uWz2ZF6WdJgZMJaPdhc5lm4cRVhxYjWCTr6dYrJZJE+52sMdovho6CBYvqS3aJctUigA=⁩
> Arc-Seal: ⁨i=1; a=rsa-sha256; t=1537369945; cv=none; d=google.com 
> <http://google.com/>; s=arc-20160816; 
> b=q+V8L4kb2CQv1/PWwY8MbyRNxSXjsjktEo9n3t2wIyz+bueofzSoi6Nbww/saWVEuk 
> /sNuXJTwYL5sb2yq1a8p/TdiRL3acfnmefNLxzTnRD1hhRFHB5gYg1QMKJbuL5u2sRcK 
> 0pRcTS8QRE0o355Zqn0x09AMJSrjV6naEJeN+lbH0u7OR9tBIFZf/2e/LC50lOKSHZK8 
> amTsQ7KtFS/lZo+YFzopdSf+0lm18nlHI+aWrbcWGBIEZWFRTsS6NF1llIBk4blywH6w 
> SoqrDhvBpmmmvX0BLv1Afpe8X9ENhYhJDiZWAXIJt2A9Me4AmaAQYVDL82dIRBv99Zjj EIlw==⁩
> ⁨<cafsvv8kpbkmxdnmtwupwvlp_l1gmcav5ktvsbybjruomsmk...@mail.gmail.com 
> <mailto:cafsvv8kpbkmxdnmtwupwvlp_l1gmcav5ktvsbybjruomsmk...@mail.gmail.com>>⁩
> X-Received: ⁨by 2002:a63:d946:: with SMTP id 
> e6-v6mr33028719pgj.24.1537369945108; Wed, 19 Sep 2018 08:12:25 -0700 (PDT)⁩
> X-Received: ⁨by 2002:aca:d4cd:: with SMTP id 
> l196-v6mr1843848oig.15.1537369938395; Wed, 19 Sep 2018 08:12:18 -0700 (PDT)⁩
> X-Gm-Message-State: ⁨APzg51CP/4Ackzujn5h7alRAm00DwokIz78aAYSN6clm2JcoGXVLqvxv 
> QPe591gjHrNPrPd+1FUzk8L27KbwXMM1XWveYelecrQE⁩
> Return-Path: ⁨<SRS0=yXhb=MB=monumetric.com=spen...@bounce.secureserver.net 
> <mailto:SRS0=yXhb=MB=monumetric.com=spen...@bounce.secureserver.net>>⁩
> Arc-Authentication-Results: ⁨i=1; mx.google.com <http://mx.google.com/>; 
> dkim=pass header.i=@monumetric.com <mailto:header.i=@monumetric.com> 
> header.s=google header.b="GjPN9ZA/"; spf=fail (google.com 
> <http://google.com/>: domain of 
> srs0=yxhb=mb=monumetric.com=spen...@bounce.secureserver.net 
> <mailto:srs0=yxhb=mb=monumetric.com=spen...@bounce.secureserver.net> does not 
> designate 69.12.213.130 as permitted sender) 
> smtp.mailfrom="SRS0=yXhb=MB=monumetric.com=spen...@bounce.secureserver.net 
> <mailto:SRS0=yXhb=MB=monumetric.com=spen...@bounce.secureserver.net>"⁩
> X-Google-Smtp-Source: 
> ⁨ANB0VdahNQV0GFj6mGZtXu70l35CiBWONQEG5kyAmCNhQRlsb6R/Gb6eSy1RGu0VwxnD7k87sozG⁩
> X-Virus-Scanned: ⁨Content scanner at isipp.com <http://isipp.com/>⁩
> Mime-Version: ⁨1.0⁩
> Authentication-Results: ⁨mx.google.com <http://mx.google.com/>; dkim=pass 
> header.i=@monumetric.com <mailto:header.i=@monumetric.com> header.s=google 
> header.b="GjPN9ZA/"; spf=fail (google.com <http://google.com/>: domain of 
> srs0=yxhb=mb=monumetric.com=spen...@bounce.secureserver.net 
> <mailto:srs0=yxhb=mb=monumetric.com=spen...@bounce.secureserver.net> does not 
> designate 69.12.213.130 as permitted sender) 
> smtp.mailfrom="SRS0=yXhb=MB=monumetric.com=spen...@bounce.secureserver.net 
> <mailto:SRS0=yXhb=MB=monumetric.com=spen...@bounce.secureserver.net>"⁩
> X-Outreach-Sent: ⁨true⁩
> Arc-Message-Signature: ⁨i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com 
> <http://google.com/>; s=arc-20160816; 
> h=to:subject:message-id:date:mime-version:references:in-reply-to:from 
> :dkim-signature:delivered-to; 
> bh=94QniIOXIK7qmn0tHsrIEiy6UnZUcbGO6y+Q2WjmOn8=; 
> b=buUo3XdBUc+6TdlWfCe2larT+N/o3BtrLg5bpKFMrPwlU3Owp1cWjzuKdk4jd8YeRR 
> v3m9GOHBr4hxlaY8dSJMQgryPYCGHP4HIwGk6I0iXFL9LmroKfleTWNgxOYunvOakgtR 
> L31e1hoUv1M+ClU/sz+vpyhnu9jRcjtq7Mli8DwHy2DuBVw/gjLQYO7iYIDtnave1oiY 
> hSH4KGcqrYoLmIEXIJ+Z6gCK1I6fGtRoBVyitPvKD8jmFVIKLUvRREh93pOXE9ushhVs 
> cSrwOpBzQ8RlwqbrUX4nzkAXjEJHPB3EnIHS2qsXHKEflAvzKjuEJ72k95cnetIX0tjj smfw==⁩
> ⁨<cafsvv8jjhugcmflhruqt99_vjemdkt6vhpvhnqqanzmqlwx...@mail.gmail.com 
> <mailto:cafsvv8jjhugcmflhruqt99_vjemdkt6vhpvhnqqanzmqlwx...@mail.gmail.com>>⁩
> Dkim-Signature: ⁨v=1; a=rsa-sha256; c=relaxed/relaxed; d=monumetric.com 
> <http://monumetric.com/>; s=google; 
> h=from:in-reply-to:references:mime-version:date:message-id:subject:to; 
> bh=94QniIOXIK7qmn0tHsrIEiy6UnZUcbGO6y+Q2WjmOn8=; 
> b=GjPN9ZA/QAT+OHjAdYjuaJgtSPWtmMf2SdbdMhuG+pBYWQqPLNspIwPRDL0t8c8ks1 
> r4mixeH92O5tpqbBfwzX1gyZtQWiP4MPsRbKKhmg/MzBmxdCGKfPoLJkjpILHiIU/zoF 
> Rd3C3Sfs7V6l9Xq9Lw3lRhBB0lhrU5bGffCNNcsii23+iX3UgHo08O/OrO+Gdkzm3lqn 
> 5QQ/mbr/Nq8eRqHaIuxkiZB1vAp9dUy9agSVQ99x3h4DhgAvtL6pQGVUrfMdTQis9b1T 
> +jBeV5x47GnQYMg3v23NA1E/qWJCylPHlyOUVFyvBJ3k1JSQVZVK831sSRYnMnYL0v+u lgTA==⁩
> X-Spam-Score: ⁨-1.998⁩
> ⁨<cafsvv8kpbkmxdnmtwupwvlp_l1gmcav5ktvsbybjruomsmk...@mail.gmail.com 
> <mailto:cafsvv8kpbkmxdnmtwupwvlp_l1gmcav5ktvsbybjruomsmk...@mail.gmail.com>>⁩
> X-Google-Dkim-Signature: ⁨v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net 
> <http://1e100.net/>; s=20161025; 
> h=x-gm-message-state:from:in-reply-to:references:mime-version:date 
> :message-id:subject:to; bh=94QniIOXIK7qmn0tHsrIEiy6UnZUcbGO6y+Q2WjmOn8=; 
> b=AfRMa+6YWHrJadDJVy2cLgqWTd21rFcPNj3AVFw4PDrJDN3QfcsQchCYqXUStaWCMz 
> G0WSB8i1RgetfEJdaAe061eW8v6Xoya/bgcJYzK61LbQ6+cHPmcMhG30HdUj9nCPUpyc 
> WwQEC4Tvf0TmqOYLjNJoSj33Dbj423/NXifgSwQ4zRWMtK3XfF95T7VG5AH1LHJ0ePh4 
> fX1nXWvLU8QFcZW5EeIriO05sOC0fuEP6Iy+Zu6l5YBN5MaRlDTF9SiOdQWduvcJTPxG 
> T+tvuZDyyCGdL03zA6aGKGrksoof4Ej0CyurL6cCMRn9leE3QS6TZe5liV9C4acyX+Pu 9Gxg==⁩
> X-Spam-Status: ⁨No, score=-1.998 tagged_above=-999 required=6.31 
> tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, 
> HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, 
> RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, 
> T_RP_MATCHES_RCVD=-0.01, UNPARSEABLE_RELAY=0.001] autolearn=ham 
> autolearn_force=no⁩
> X-Spam-Flag: ⁨NO⁩
> Received-Spf: ⁨fail (google.com <http://google.com/>: domain of 
> srs0=yxhb=mb=monumetric.com=spen...@bounce.secureserver.net 
> <mailto:srs0=yxhb=mb=monumetric.com=spen...@bounce.secureserver.net> does not 
> designate 69.12.213.130 as permitted sender) client-ip=69.12.213.130;⁩
> Delivered-To: ⁨anne.mitchell....@gmail.com 
> <mailto:anne.mitchell....@gmail.com>⁩
> Delivered-To: ⁨i...@theinternetpatrol.com <mailto:i...@theinternetpatrol.com>⁩
> Content-Type: ⁨multipart/related; boundary="000000000000112cd905763ad5d1"⁩
> Received: ⁨by 2002:a67:446:0:0:0:0:0 with SMTP id 67-v6csp776627vse; Wed, 19 
> Sep 2018 08:12:25 -0700 (PDT)⁩
> Received: ⁨from allegro.isipp.com <http://allegro.isipp.com/> 
> (allegro.isipp.com <http://allegro.isipp.com/>. [69.12.213.130]) by 
> mx.google.com <http://mx.google.com/> with ESMTPS id 
> d5-v6si19276122pgq.316.2018.09.19.08.12.24 (version=TLS1_2 
> cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Wed, 19 Sep 2018 08:12:25 
> -0700 (PDT)⁩
> Received: ⁨from p3plsmtp02-02-26.prod.phx3.secureserver.net 
> <http://p3plsmtp02-02-26.prod.phx3.secureserver.net/> 
> (p3plsmtp02-02.prod.phx3.secureserver.net 
> <http://p3plsmtp02-02.prod.phx3.secureserver.net/> [72.167.218.32]) by 
> allegro.isipp.com <http://allegro.isipp.com/> (8.15.2/8.15.2/Debian-8) with 
> ESMTP id w8JFCL51017721 for <amitch...@isipp.com 
> <mailto:amitch...@isipp.com>>; Wed, 19 Sep 2018 08:12:22 -0700⁩
> Received: ⁨(qmail 56200 invoked from network); 19 Sep 2018 15:12:19 -0000⁩
> Received: ⁨(qmail 56189 invoked by uid 30297); 19 Sep 2018 15:12:19 -0000⁩
> Received: ⁨from unknown (HELO p3plibsmtp02-15.prod.phx3.secureserver.net 
> <http://p3plibsmtp02-15.prod.phx3.secureserver.net/>) ([68.178.213.15]) 
> (envelope-sender <spen...@monumetric.com <mailto:spen...@monumetric.com>>) by 
> p3plsmtp02-02-26.prod.phx3.secureserver.net 
> <http://p3plsmtp02-02-26.prod.phx3.secureserver.net/> (qmail-1.03) with SMTP 
> for <i...@theinternetpatrol.com <mailto:i...@theinternetpatrol.com>>; 19 Sep 
> 2018 15:12:19 -0000⁩
> Received: ⁨from mail-oi0-f67.google.com <http://mail-oi0-f67.google.com/> 
> ([209.85.218.67]) by bizsmtp with ESMTP id 2e9LgOTlogX7v2e9Lg0IwS; Wed, 19 
> Sep 2018 08:12:19 -0700⁩
> Received: ⁨by mail-oi0-f67.google.com <http://mail-oi0-f67.google.com/> with 
> SMTP id l202-v6so5403953oig.7 for <i...@theinternetpatrol.com 
> <mailto:i...@theinternetpatrol.com>>; Wed, 19 Sep 2018 08:12:19 -0700 (PDT)⁩
> Received: ⁨from 193155701165 named unknown by gmailapi.google.com 
> <http://gmailapi.google.com/> with HTTPREST; Wed, 19 Sep 2018 08:12:17 -0700⁩

> From: Spencer Myers <spen...@monumetric.com <mailto:spen...@monumetric.com>>
> Subject: Re: New Advertisers for www.theinternetpatrol.com/ 
> <http://www.theinternetpatrol.com/>
> Date: September 19, 2018 at 9:12:17 AM MDT
> To: There TBD <i...@theinternetpatrol.com <mailto:i...@theinternetpatrol.com>>
> 
> Hey There,
> 
> Just following up on my previous email. 
> 
> Monumetric currently provides a full service, 100% fill rate ad strategy with 
> a 75% rev-share to publishers with a personal touch.
> 
> Any interest in scheduling a brief call? I'm available by email as well.
> 
> Thank you,
> 
> 
> 
> Spencer Myers
> 208.403.2562
> Skype: Spencer-Myers
> 
> 
> If you'd like me to stop sending you emails, please click here 
> <https://monumetricorg.orjupiter.com/api/mailings/unsubscribe/PMRGSZBCHI2TGOBVGYWCE33SM4RDUITBGE3TGMBZGAYS2ZBZMQ3C2NBRGNTC2YRYMJRS2ZDFMRQTIOJZGYYTQZJREIWCE43JM4RDUISGJRKESUSTGYZGQ4CHN5ATKWKZPFHHURCHJ53VAZTQGFEWYRC2KNFWSS2UNRMEU2SLPFKT2IT5>
> 
> 
> On Mon, Sep 17, 2018 at 8:11 am, Spencer Myers wrote:
> 
> Hey There
> 
> Who would be the best person to speak with about lining up advertisers to buy 
> display advertising on www.theinternetpatrol.com/ 
> <http://www.theinternetpatrol.com/>?
> 
> Thanks,
> 
> 
> Spencer Myers
> 208.403.2562
> Skype: Spencer-Myers
> 
> If you'd like me to stop sending you emails, please click here 
> <https://monumetricorg.orjupiter.com/api/mailings/unsubscribe/PMRGSZBCHI2TGNZRGEWCE33SM4RDUITBGE3TGMBZGAYS2ZBZMQ3C2NBRGNTC2YRYMJRS2ZDFMRQTIOJZGYYTQZJREIWCE43JM4RDUIRSJRYEMS3QM5SWQULIPE3VKOKFGBXXQ6KIOV4FSWSHPB2UOM2IIVMEU22LIRBUSLKILJCT2IT5>
>  


_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to