I’ve been getting a lot of auto sales, windows install, and pharma spam
recently that is getting through SA. Here are headers for one from this morning:
Return-Path: <installationnot...@windowmate-832.us>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on mail.covisp.net
X-Spam-Level: *
X-Spam-Status: No, score=1.7 required=5.0 tests=URIBL_BLACK autolearn=no
version=3.3.2
X-Spam-Report:
* 1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
* [URIs: windowmate-832.us]
X-Original-To: mun...@null.com
Delivered-To: lbut...@covisp.net
Received: from windowmate-832.us (108.168.239.180-static.reverse.softlayer.com
[108.168.239.180])
by mail.covisp.net (Postfix) with ESMTP id CEE0D50D40B
for <mun...@null.com>; Thu, 28 Aug 2014 08:48:51 -0600 (MDT)
Date: Thu, 28 Aug 2014 07:45:10 -0700
To: <munged@null>
Content-Type: text/plain
CMDAuthCode: 10-6414818373-install-75d769e5b2e49dd09bd8c43836b66aaf
From: "Installation Notice" <installationnot...@windowmate-832.us>
Mime-Version: 1.0
Subject: Re: Your Home Depot window installation appt. is coming up...
Message-ID: <windw-88937059726.23-14818373-...@windowmate-832.us-sp-066>
or this one:
Return-Path: <autoinsurancenotice...@auto-cover-id66121.us>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on mail.covisp.net
X-Spam-Level:
X-Spam-Status: No, score=-0.0 required=5.0 tests=SPF_HELO_PASS,SPF_PASS
autolearn=ham version=3.3.2
X-Spam-Report:
* -0.0 SPF_HELO_PASS SPF: HELO matches SPF record
* -0.0 SPF_PASS SPF: sender matches SPF record
X-Original-To: mun...@null.com
Delivered-To: lbut...@covisp.net
Received: from auto-cover-id66121.us
(108.168.239.177-static.reverse.softlayer.com [108.168.239.177])
by mail.covisp.net (Postfix) with ESMTP id 926A150D40B
for <mun...@null.com>; Thu, 28 Aug 2014 08:09:39 -0600 (MDT)
Date: Thu, 28 Aug 2014 07:08:27 -0700
RTS-Auto: 14911343-3244-14507179-97
Content-Type: text/plain
Message-ID: <car-52214911343.1215-14507179-...@auto-cover-id66121.us-12004>
Subject: Re: Your Updated Auto-Policy Payment Rate Info: 08/28/14
From: "Auto Insurance Notice" <autoinsurancenotice...@auto-cover-id66121.us>
Mime-Version: 1.0
To: <munged@null>
(I am currently updating SA to 3.4 $CURRENT)
--
'I'll tell you this!' shouted Rincewind. 'I'd rather trust me than
history! Oh, shit, did I just say that?'
