<HTML>
<HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="OPENWEBMAIL" name=GENERATOR>
</HEAD>
<BODY bgColor=#ffffff>
<font size="2">sendgrid seems to get abused alot. you can send those headers to them and hope it help improve things on their end abuse@sendgrid.com</font>
<div>
<br /></div>
<div><font size="2">
<br />
<br />--
<br />
Open WebMail Project (<a href="http://openwebmail.org/" target="_blank">http://openwebmail.org</a>)
<br />
<br />
<br /><b>---------- Original Message
-----------</b>
<br />
From: Richard Sidlin <richard@helpinternet.co.uk>
<br />
To: "'blueonyx@mail.blueonyx.it'" <blueonyx@mail.blueonyx.it>
<br />
Sent: Wed, 19 Aug 2020 13:08:04 +0000
<br />
Subject: [BlueOnyx:24194] AVSpam
<br />
<br />> One of my clients seems to be getting a lot of obvious spam but
it’s not being seen as spam by the software. I detail part of the headers
from one below. It is mainly in Chinese with the senders name forged and is
quite obviously
spam.
Are there any further settings I can change to eliminate more of this
junk?<o:p />
<br />> <o:p>
</o:p>
<br />> Thanks
<o:p />
<br />> <o:p>
</o:p>
<br />> <o:p>
</o:p>
<br />> Received: from pop1.helpinternet.co.uk (192.168.200.90)
by<o:p />
<br />> WIN-QIQN22G6LHP.helpinternet.com (192.168.200.1) with Microsoft SMTP
Server<o:p />
<br />> (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256)
id<o:p />
<br />> 15.1.1034.26 via Frontend Transport; Tue, 18 Aug 2020 19:14:11
+0100<o:p />
<br />> Received: from
wrqvrtcx.outbound-mail.sendgrid.net<o:p />
<br />> (wrqvrtcx.outbound-mail.sendgrid.net [149.72.87.202])
by<o:p />
<br />> pop1.helpinternet.co.uk (8.15.2/8.15.2) with ESMTPS id
07IIEXrw464121<o:p />
<br />>
(version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256
verify=NO)
for<o:p />
<br />> <alister.xxxx@xxxx.co.uk>; Tue, 18 Aug 2020 19:14:35
+0100<o:p />
<br />> Received: by filter0410p1iad2.sendgrid.net with SMTP
id<o:p />
<br />> filter0410p1iad2-32474-5F3C1A88-D
2020-08-18 18:14:32.749396382
+0000<o:p />
<br />> UTC
m=+85512.410289618<o:p />
<br />> Received: from service.com (unknown) by ismtpd0008p1maa1.sendgrid.net
(SG)<o:p />
<br />> with ESMTP id O8IISi4gTSm0UkF2jKkTUA
for <alister.xxxx@xxxx.co.uk>; Tue,
18<o:p />
<br />> Aug 2020 18:14:31.838 +0000
(UTC)<o:p />
<br />> From: xxxx.co.uk
<passport@service.com><o:p />
<br />> To: Alister xxxx
<alister.xxxx@xxxx.co.uk><o:p />
<br />> Subject:
=?utf-8?B?4p224pyJIOaCqOaciVsxMl3kuKrmnKrpgIHovr7pgq7ku7Y=?=<o:p />
<br />> Thread-Topic:
=?utf-8?B?4p224pyJIOaCqOaciVsxMl3kuKrmnKrpgIHovr7pgq7ku7Y=?=<o:p />
<br />> Thread-Index:
AQHWdYtfUbtLMTVjw0iRvqvDemCwEQ==<o:p />
<br />> Date: Tue, 18 Aug 2020 18:14:32
+0000<o:p />
<br />> Message-ID:
<20200818111431.32A593EF0D4A7496@service.com><o:p />
<br />> Content-Language:
en-GB<o:p />
<br />> X-MS-Exchange-Organization-AuthSource:
WIN-QIQN22G6LHP.helpinternet.com<o:p />
<br />>
X-MS-Has-Attach:<o:p />
<br />>
X-MS-TNEF-Correlator:<o:p />
<br />> x-spam-status: No, score=4.7 required=5.0
tests=BAYES_00,DCC_CHECK,<o:p />
<br />>
DKIMWL_WL_MED,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_EF,FSL_BULK_SIG,<o:p />
<br />>
HEADER_FROM_DIFFERENT_DOMAINS,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,<o:p />
<br />>
MIME_HTML_ONLY,RATS_SPAM,RCVD_IN_BL_SPAMCOP_NET,SPF_HELO_NONE,SPF_PASS,<o:p />
<br />>
TXREP,UNPARSEABLE_RELAY,URIBL_BLOCKED autolearn=no
autolearn_force=no<o:p />
<br />>
version=3.4.2<o:p />
<br />> Content-Type:
multipart/alternative;<o:p />
<br />>
boundary="_000_2020081811143132A593EF0D4A7496servicecom_"<o:p />
<br />> MIME-Version:
1.0<o:p />
<br /><b>------- End of Original Message
-------</b>
<br />
</font>
</div>
</BODY>
</HTML>