On 2024-01-22 06:58, Benoit Panizzon via mailop wrote:
https://blacklist.imp.ch/entry.php?id=1.0.8.0.0.0.0.0.0.0.0.0.0.0.0.0.2.1.e.2.3.0.4.f.1.1.1.0.1.0.a.2
no further comment needed...
Mit freundlichen Grüssen
-Benoît Panizzon-
We don't typically use IPv6, but the pattern matches a large outbreak
since Friday.
All adult related.. But things look slightly different in your samples,
could they have been modified? I see the Return-Path is not in it's
typical location..
X-TMN: [3f5cjg/dYFbYRf7gmnGi9L9zVySwp1yv]
X-ClientProxiedBy: VI1PR08CA0273.eurprd08.prod.outlook.com
(2603:10a6:803:dc::46) To AS2PR03MB9879.eurprd03.prod.outlook.com
(2603:10a6:20b:547::20)
Return-Path: ne_ta...@outlook.com
Your content in those however, appears different to the main content in
the Spam run, which uses Amazon URI, using default naming convention (PTR).
--
"Catch the Magic of Linux..."
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Reg. TradeMark of Wizard Tower TechnoServices Ltd.
604-682-0300 Beautiful British Columbia, Canada
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
