This spammer or mail to hire company, spams through Gmail services..

Return-Path: <[email protected]>
Received: from mail-io1-f50.google.com (HELO mail-io1-f50.google.com) (209.85.166.50)
...

However..

X-Google-Smtp-Source: AGHT+IF+YQj10sXzr631pp0MqKBzywMKwgMR40jKetDYeAC5No/cCx2lD4x7tB7lheld3srQrM8NAQ== X-Received: by 2002:a05:6602:1506:b0:7a9:945f:e46 with SMTP id g6-20020a056602150600b007a9945f0e46mr3494887iow.13.1698244416314;
        Wed, 25 Oct 2023 07:33:36 -0700 (PDT)

* As you can see above, this is a straight SMTP relay..

Return-Path: <[email protected]>

* Gmail fails to strip any existing Return-Path

Received: from sredplus.com (217.11.133.34.bc.googleusercontent.com. [34.133.11.217]) by smtp.gmail.com with ESMTPSA id a19-20020a02ac13000000b00459d7c3dcf3sm3398637jao.115.2023.10.25.07.33.35
        for <[email protected]>
        (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
        Wed, 25 Oct 2023 07:33:35 -0700 (PDT)

* It originates from Google Cloud IPs..

Date: Wed, 25 Oct 2023 14:33:35 +0000
From: Sales Team <[email protected]>
Message-ID: <6539273fe0c38_134044157...@sidekiq-email-sending-56bfbc7c8b-lfb9j.mail>

....

Maybe Brandon can weigh in on or off list, but is there a a way for spammers to simply relay out Gmail servers if they are Google Cloud?


--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop

Reply via email to