Share

Question

I am being BOMBARDED, and I mean BOMBARDED with spam from Digital Ocean over 5 spams a day all from the same bunch of domains, all hosted on DigitalOcean and coming from your IPs.

In the last 2 weeks I’ve emailed your abuse mailbox 20+ times and filled in the contact abuse form 10+ times.

NOTHING is being done about it. My next plan of action is to keep posting here until Digital Ocean takes action.

Do you even have an abuse team? are they doing any work at all? I can provide 30 more samples if needed.

Spam 1

Received: from SN1NAM02HT012.eop-nam02.prod.protection.outlook.com
(2603:10a6:4:cb::11) by DB6PR0901MB0840.eurprd09.prod.outlook.com with HTTPS
via DB6P195CA0001.EURP195.PROD.OUTLOOK.COM; Tue, 31 Jul 2018 19:46:57 +0000
Received: from SN1NAM02FT061.eop-nam02.prod.protection.outlook.com
(10.152.72.54) by SN1NAM02HT012.eop-nam02.prod.protection.outlook.com
(10.152.72.254) with Microsoft SMTP Server (version=TLS12,
cipher=TLSECDHERSAWITHAES256CBCSHA384_P384) id 15.20.995.12; Tue, 31
Jul 2018 19:46:56 +0000
Authentication-Results: spf=none (sender IP is 159.65.159.182)
smtp.mailfrom=americandream.services; live.com; dkim=none (message not
signed) header.d=none;live.com; dmarc=none action=none
header.from=hhj6frrklxu2fd04qkn5.americandream.services;
Received-SPF: None (protection.outlook.com: americandream.services does not
designate permitted sender hosts)
Received: from itc.gov (159.65.159.182) by
SN1NAM02FT061.mail.protection.outlook.com (10.152.72.196) with Microsoft SMTP
Server id 15.20.1038.3 via Frontend Transport; Tue, 31 Jul 2018 19:46:56
+0000
X-IncomingTopHeaderMarker: OriginalChecksum:CF22AD0BFFC67C5AA422B39A1B5CE01C8430C7C9B26EDA8FC137088844E8D96C;UpperCasedChecksum:BE855FB0E3CED65073A262028657131DC20A9C207E95EEFF39DDD79F2486C0D1;SizeAsReceived:482;Count:10
From: Loan Notice - VivaLoan
hhj6frrklxu2fd04qkn5@hhj6frrklxu2fd04qkn5.americandream.services
Reply-To: 1w52h17zxlvcqil8wzhl@americandream.services
Sender: Loan Notice - VivaLoan <redacted>
To: <redacted>
Date: Tue, 31 Jul 2018 19:46:55 +0000
Subject: Pending: Approval on $15,000 Next Day Deposit
List-Unsubscribe: <>
Content-Type: text/html; charset=“us-ascii”;
boundary=“lpuafuz87irvykwd3ehe.1118834.lpuafuz87irvykwd3ehe”
X-IncomingHeaderCount: 10
Message-ID: 554e4fea-34cc-479e-9179-12db46a0212c@SN1NAM02FT061.eop-nam02.prod.protection.outlook.com
Return-Path: contact@americandream.services
X-MS-Exchange-Organization-ExpirationStartTime: 31 Jul 2018 19:46:56.6704
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: Original Submit
X-MS-Exchange-Organization-ExpirationInterval: 2:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: Original Submit
X-MS-Exchange-Organization-Network-Message-Id: feb2c06c-9013-4252-43ed-08d5f71e5f89
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-Microsoft-Exchange-Diagnostics: 1;SN1NAM02FT061;1:wUR0eQsn5xU1Q6OpHf6DXJO3cL0q3RxMOYsvVQKzo2MdSlArGvAuove2Xj37MWiBw78HIPfM1E4HfbXA8D7q0NvEGS+BKJhLmuvwDK5DKUf1D9pfgBAR2li+jQGrD3Uf
X-Forefront-Antispam-Report: EFV:NLI;
X-MS-Exchange-Organization-AuthSource:
SN1NAM02FT061.eop-nam02.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-UserLastLogonTime: 7/31/2018 7:13:54 PM
X-MS-Office365-Filtering-Correlation-Id: feb2c06c-9013-4252-43ed-08d5f71e5f89
X-Microsoft-Antispam:
BCL:0;PCL:0;RULEID:(5000110)(711020)(4605076)(610169)(8291501071);SRVR:SN1NAM02HT012;
X-Microsoft-Exchange-Diagnostics:
1;SN1NAM02HT012;3:i/7GJMTcDEMo0SrNUq9DbaST64jcrau9zypuqks69b6vw9qYZIIaIZdajr2x+5w9xt5NaHtVYPV+0VHe8K4VeIzF+legWhViE1YA2IrkvnLLUgMXj41LWvg6+c75rxANkrBXvkSW1fnGTfVhDAGymAmlKRFpl2EjLfWjlCoizWXLuhC8TafUptX8kSqNB5GKhK0FuAVt3IGMn0djM9gMUlnQW1qBZkV2K6qeztTYjeHEqiKZQDljUFcuL+VnJr9tGNfEhLCzQCEWj/mz2igyFmnCSKWEaKTdt8ZsjVMYlTG3VIjxG2g1kNnc++XgBlZI;25:zxoH04zqLuhxDTxWPmw+5uzy3i1CPwnKS+xpxyQOazbd31sFZCcNY8dblG/NdhHUkY9612ilk+/cHaoQ2sfZHmcuvFqVZ025KBMTT4zgmic+GRNM2syRuv6kUFOaB8BacJ5bDM5PMGvi4ECfPPSEuZaeGNQnZ/FSpG1PHsbt95lcSEpQ3jc4Qs7UTbBlfDq4N92TzzIgP70tUwfA4gHwbTNl3iDJ/+sE8z8mq3L0z20xwHQjuQr0ia/c3mn0z021WyVxTiAeRqfoP/vZc+TrV51SPsor+FxsBsccsfBLbH+EvZgKcQvrJmzOGBxMTh13cgxyrfGLlkONN2DzH23YAQ==;31:tErSU9MInfa1rEUZs0g6g7yDrIbIvWgJEe3T9ktd3jp8AkK0bWTa6pYvazWZjQKJCxT3UpJIv7bYYw4zhECeepAYG299PTz0RfWWR31mUl6JDqoAT9kftMtM2gOSEbTz9O9Of/gmr8/EWCAy+95CMXzVlKRtCmtq354/GP7ujPyy3GygmwVvzxhK0Nym4yO4q+TbH/+Uv3t7yXv7UYuy5J5J+uOuHrPgYZLpHmmtM0U=
X-MS-TrafficTypeDiagnostic: SN1NAM02HT012:
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 159.65.159.182
X-SID-PRA: redacted
X-SID-Result: NONE
X-MS-Exchange-Organization-PCL: 2
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test:
BCL:0;PCL:0;RULEID:(444111676)(1540499029)(120799088)(780499008)(950299008)(52401285)(52601095)(52606095)(52602095)(52606095)(52602095)(52606095)(52602095)(52606095)(52602095)(52505095)(52501095)(52406095)(52402095)(82015058);SRVR:SN1NAM02HT012;BCL:0;PCL:0;RULEID:;SRVR:SN1NAM02HT012;
X-Microsoft-Exchange-Diagnostics:
1;SN1NAM02HT012;4:cD2m5/8sqOghRFwlraSoC0mvnqjInSVPxsZPSWDoy3UFb5qOA+Eeo4oooahKD+UAJAu3mBL+U4P11HfZ2hByjYjm72moGsHRhuIphLmef1BfiHtvslN1nLNeZQ73iNQkFahYuFPRV4ltkj44AZwyj44/MQrcQTJgXD2BGwOtKIjyTJNBa2v75JKAgAnV4d2SPO1RgXkPRYQrCpmb0k/d+9coSTs7EVPgE3xl4l/vgt9udRRAOtEW32I96PmTxhVX1j9VcVpwq9QN1KkRmjiR/g==;6:Esg+R3zWg15gOs8UAoskS+Sp+9DNmrzVM/5f1UH9dQ3Y4uRNMgLcw/QqXBiWk1tSmrpq8KP2T7OgNt6KWsHiIR0rriikNRN8IpUlhmi50WfzgqwmdaQ7XHNykSdTV07nYNPc7G8dk5Mu/jIhEb0KPf2jy9snvToYSPQ/bBgr9Vrmo84thcCscqh6P8l4JG8oCkGP+nKcbhhKTHDFRP5vtbKjKn4WtS395XYZ1DZWJ0igH9Y2kCFpDmBkBvcq3KJPUjOGCUdgpWfvhOrZAYwFLznBU+Hdq7hJ6nczi+blLNk6YyGCe68RsJFByRRxybKmlwXHsfLNEgNfzdfVQpqXSoQJKQ1Vs7WTthgS7eHh9IhFxc0yBCHiSkyKV67nOa6nUQlMFE2Yhuz3rsrIa6y6imhFoiKeEl0bVUjpXJmm3hCHZrBGQXSzHqb+Cc1wtwkzivaj/vwZSEaAM1jOWpCwkQ==;5:cxL4Crvqf06kt/+p8RJ7tlUn0UnrFECD6hU9acaJx6ofBMZ6TKv+gu4PtzjwARQoY7nKAiN90ZSjVGfNpN5RbyVhCy9JXdVewmFVYtnHqjtK/+yzl9VtLprgxcBPtwKq7X1QjQbOLjwjeWx1Y9RutcUcSvborDb3D/cQZcb8SCU=
X-Microsoft-Antispam-Message-Info:
zoahiKh50qE6OHgJsmnbor0A2ItbWXFctCRBN0vNaABu7HksFEYSmU4JpysbP4I2DRsnZjUcYFng94RLNA8M8GUza1wGoqGabc2B+elcBBfF/WtshxAWoSlS+xPYQc6hTeKzSxsvRM7oMbDpZ/7HEv4aSk1KAFd3v902whaVr9TubYl+4owymgomqNLDyILsXrpwf/hzhqkTcL+qjh/PhiVvjN+mRVvqBY/3dbueKVMMG+Ynw+0Xd2jSZVt/txLgP2oGol8HUnitxRwce6/L/wBtEvtp+46h+twe2F4KBN00Qypi8a1de6O4HLq7FWuKreORc7p3Ylqi4/CcpEyxnFPSmej016+tsebHaD+4KBlOQSckSfQYmuSVnl9BmU31y6sMLXaiuAkuOShQXcS9TA==
X-Microsoft-Exchange-Diagnostics:
1;SN1NAM02HT012;7:YPfzqkPbLZhyzbZdY1ZGXw8d4mru26o56ENa5O68EK/pUqm9sObyYNbE8tVcaXr3azhZggHx5d81ufiiR0sIppp6Dcl7TBNDsDYVFNdMzOpXwf3RcuPK0bTXejsyMk3uMcee0P1VtW7+bCpslz0XX4k0SrUdLSSSPUIxxDhMidOOKfKekGL2oyoeh8kA5beN4ruPBY+6HrOfs2ViChKRqCcV9UjYw/gahd8+wTDI95rnKOQaEcxI42TL1ZebEtV4
X-OriginatorOrg: live.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 31 Jul 2018 19:46:56.3891
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: feb2c06c-9013-4252-43ed-08d5f71e5f89
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
f12efbb0-867f-4c93-8261-502eceebfafa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1NAM02HT012
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.4572563
X-MS-Exchange-Processed-By-BccFoldering: 15.20.0995.000
Importance: high
X-Priority: 1
X-Microsoft-Exchange-Diagnostics:
1;DB6PR0901MB0840;27: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
X-Microsoft-Antispam-Mailbox-Delivery:
ucf:0;jmr:0;ex:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(5062000261)(5061607266)(5061608174)(1007183)(4900095)(4920089)(6320004)(4923001);RF:JunkEmail;
X-Message-Info:
qoGN4b5S4yrj5hA6ER+AykNieONlpOBLadWZwJKw+KsRWx9WH+snuJT4DqlfCMsXLLB/dpc9wxVZ3wAYp2CTQv9CxolNAcFv6yjquc5Wj4C0ql+8oRGbTNbGopITdvXtRQRMoZmeBVslSOOigoIQZniEPlfw4gEWGZKGP4MUDAO7OfGKpvieX27wmxYtg6i3kTvxBE2bdjaxpmNxAhl5pQ==
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0zO1NDTD02
X-Microsoft-Antispam-Message-Info:
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
MIME-Version: 1.0

<html>
<head>
<meta http-equiv=“Content-Type” content=“text/html; charset=us-ascii”></head>
<style>
PORN4c51631e-d6d9-d9cb-ed0d-557e9df04c6f
PORNbf1b6126-fad1-6228-da1f-9a16399cdcf9
PORN15ad2ef2-86ae-352b-5990-1a9d54b247c2
PORN3b23842a-b3b9-5b77-8d16-f075bcae2156
PORN915ff6ff-2a2e-d9eb-c748-2d44ea88b2f6
PORN430ea892-dbf6-af9d-bea9-ce4f2d05b0c4
PORN62f2448c-a43e-cf33-e31a-ef424e0834f8
PORN50e73f9b-cc82-c229-6b79-04cea643737d
PORN2898c2ad-3e27-20e3-59c2-3845527b375d
PORN5c8ba3f7-672b-0642-8442-679449aa30d3
PORN437bd3e8-4570-cc17-323b-c66fd2d4cf83
PORN2474b1b4-88ca-1664-0e58-b5d64253a6ae
PORNf58ec3ef-1cb4-bf75-1a46-e23242058736
PORN96b57fa7-382f-7d4a-49c3-53a24e4b8d53
PORN4e00d38d-632a-80c4-26dc-67aad83ef3f5
PORNe5e035ab-4c19-b745-aca1-c94d186df953
PORNd882e3a7-2540-b52e-b495-76584b2395de
PORN77f0b633-187a-8e19-713f-0e94e4f906c7
PORN402b9455-4bde-8acc-a6aa-f2c6d354e642
PORNb7e0fa09-1f61-327b-88bb-004c046e8ed6
PORN63032448-e2c4-6472-1d18-e140a740e67d
PORN966196e7-2eff-ceb5-2e6e-0211637312eb
PORNff7010e5-9a09-c53a-15b8-ec5b22342e16
PORN64decb8d-cb21-84a3-63b7-6c3d77993762
PORNee51bcd4-ba94-11bc-e665-ba76b9960495
PORN4c51631e-d6d9-d9cb-ed0d-557e9df04c6f
PORNbf1b6126-fad1-6228-da1f-9a16399cdcf9
PORN15ad2ef2-86ae-352b-5990-1a9d54b247c2
PORN3b23842a-b3b9-5b77-8d16-f075bcae2156
PORN915ff6ff-2a2e-d9eb-c748-2d44ea88b2f6
PORN430ea892-dbf6-af9d-bea9-ce4f2d05b0c4
PORN62f2448c-a43e-cf33-e31a-ef424e0834f8
PORN50e73f9b-cc82-c229-6b79-04cea643737d
PORN2898c2ad-3e27-20e3-59c2-3845527b375d
PORN5c8ba3f7-672b-0642-8442-679449aa30d3
PORN437bd3e8-4570-cc17-323b-c66fd2d4cf83
PORN2474b1b4-88ca-1664-0e58-b5d64253a6ae
PORNf58ec3ef-1cb4-bf75-1a46-e23242058736
PORN96b57fa7-382f-7d4a-49c3-53a24e4b8d53
PORN4e00d38d-632a-80c4-26dc-67aad83ef3f5
PORNe5e035ab-4c19-b745-aca1-c94d186df953
PORNd882e3a7-2540-b52e-b495-76584b2395de
PORN77f0b633-187a-8e19-713f-0e94e4f906c7
PORN402b9455-4bde-8acc-a6aa-f2c6d354e642
PORNb7e0fa09-1f61-327b-88bb-004c046e8ed6
PORN63032448-e2c4-6472-1d18-e140a740e67d
PORN966196e7-2eff-ceb5-2e6e-0211637312eb
PORNff7010e5-9a09-c53a-15b8-ec5b22342e16
PORN64decb8d-cb21-84a3-63b7-6c3d77993762
PORNee51bcd4-ba94-11bc-e665-ba76b9960495

</style>

<body>

<center>

<a href=“http://artcaslte.club/n3u6597s8ebtrfmqqfkf-x2sddsfwiozzr473bpv5iq9ne353j6ebjc9fKcpxssefssjelklopsjellksjcdnjneskgfde0cxcsawehplknhejfgdepcdgsawelmdflmdflmdfperfperfcdnjkloperths2es5e1” style=“text-decoration: none;”>
<font size=“4” color=“#70ADEF”>
Pending: Approval on $15,000 Next Day Deposit
</font></a>
<br><br>
<a href=“http://artcaslte.club/fjic9xi8xo14eu9qu63s-x2sddsfwiozzr473bpv5iq9ne353j6ebjc9fKcpxssefssjelklopsjellksjcdnjneskgfde0cxcsawehplknhejfgdepcdgsawelmdflmdflmdfperfperfcdnjkloperths2es5e1”>
<img src=“http://artcaslte.club/rd7XYL3DXEPVMOB4Jcri33440c5criGNVHMM4I1URAW0oid1322oidFETPPM4EIY27WQItagoffertag0EHGCE5HKJD1AKWBZTNLTZPCHFTGWGHY69P”></a>
<br>
<a href=“http://artcaslte.club/tq95z6cyqnddhjyuubzc-x2sdsawemtp7kwhzkej3wuk84otwanmhfsqeacpxssawesjelklopsjellksjcdnjneskjefd0cxcdsfwhplknhejc9fKpcdgserwlmdflmdflmdfperfperfcdnjklopc9fKs2es5e1”>
<img src=“http://artcaslte.club/rdDSAKGFJC2cri33440c5criVWEVO2HH6R3VYLPLoid1322oidZA8LB4EQEF7E1D8269GtagunsubscribetagUV9ZPCMQG0Q916D9H”></a>
<br>
<a href=“http://artcaslte.club/nmmpz058gfvl3ylsdvh6-x2sdsefsl94sjitm9ek0sv6uz3enaq46ujefdcpxssefssjelklopsjellksjcdnjneskc9fK0cxcserwhplknhejc9fKpcdgsawelmdflmdflmdfperfperfcdnjklopjefds2es5e1”>
<img src=“http://artcaslte.club/rdgjvb8jfzx1n6d0rs0kuscri33440c5cri94FQAZZRK9FXJRHQUQ06Eoid1322oidVCSWC07J7AVBNBMYWLTLONtagunsubcampanytagDB0F10GS0PNL4ANS7FKVTV2WQBDJXGXFH”></a>
</center>
</body>
</html>

============================================================

Received: from HE1EUR02HT106.eop-EUR02.prod.protection.outlook.com
(2603:10a6:6:28::22) by DB6PR0901MB0840.eurprd09.prod.outlook.com with HTTPS
via DB6P191CA0012.EURP191.PROD.OUTLOOK.COM; Wed, 1 Aug 2018 00:25:43 +0000
Received: from HE1EUR02FT010.eop-EUR02.prod.protection.outlook.com
(10.152.10.56) by HE1EUR02HT106.eop-EUR02.prod.protection.outlook.com
(10.152.11.138) with Microsoft SMTP Server (version=TLS12,
cipher=TLSECDHERSAWITHAES256CBCSHA384_P384) id 15.20.1038.3; Wed, 1
Aug 2018 00:25:43 +0000
Authentication-Results: spf=none (sender IP is 167.99.77.41)
smtp.mailfrom=americandream.services; live.com; dkim=none (message not
signed) header.d=none;live.com; dmarc=none action=none
header.from=k6ocxn8gccfc4r52h2cz.americandream.services;
Received-SPF: None (protection.outlook.com: americandream.services does not
designate permitted sender hosts)
Received: from itc.gov (167.99.77.41) by
HE1EUR02FT010.mail.protection.outlook.com (10.152.10.249) with Microsoft SMTP
Server id 15.20.1038.3 via Frontend Transport; Wed, 1 Aug 2018 00:25:42 +0000
X-IncomingTopHeaderMarker: OriginalChecksum:9C5B66CBC736897B76D2DC8F548A1F55C6D04CDD11B9DFC12EE41D4BE920723E;UpperCasedChecksum:77102FB759E50253070A66B1AACEEEFFAC9AE9DB096343A51384E58E16970BE6;SizeAsReceived:514;Count:10
From: TrumpCareMedicare.com
k6ocxn8gccfc4r52h2cz@k6ocxn8gccfc4r52h2cz.americandream.services
Reply-To: pdsmspebwk4qibc363at@americandream.services
Sender: TrumpCareMedicare.com <“redacted>
To: <redacted>
Date: Wed, 1 Aug 2018 00:25:35 +0000
Subject: Stop overpaying for Health Insurance! Compare plans from the biggest companies!
List-Unsubscribe: <>
Content-Type: text/html; charset="us-ascii”;
boundary=“an5vymypviialg42wwhg.1118834.an5vymypviialg42wwhg”
X-IncomingHeaderCount: 10
Message-ID: c5aae257-bc9c-4713-b6fe-c174f93c1565@HE1EUR02FT010.eop-EUR02.prod.protection.outlook.com
Return-Path: contact@americandream.services
X-MS-Exchange-Organization-ExpirationStartTime: 01 Aug 2018 00:25:43.1233
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: Original Submit
X-MS-Exchange-Organization-ExpirationInterval: 2:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: Original Submit
X-MS-Exchange-Organization-Network-Message-Id: c0fde51d-3c28-486b-6e66-08d5f7455147
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-Microsoft-Exchange-Diagnostics: 1;HE1EUR02FT010;1:51KWWEUA3haotcxvH/vdF5KWp9gTY5qUCPHGzJGCd6ywcgtMuez5wjcCbVqQ4E76XbKaUDvJfBLVA1Muee7TMBlc+F5WctN79A9oMcxaONlGkJUJHAA9iRgTMh1qczVk
X-Forefront-Antispam-Report: EFV:NLI;
X-MS-Exchange-Organization-AuthSource:
HE1EUR02FT010.eop-EUR02.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-UserLastLogonTime: 8/1/2018 12:02:08 AM
X-MS-Office365-Filtering-Correlation-Id: c0fde51d-3c28-486b-6e66-08d5f7455147
X-Microsoft-Antispam:
BCL:0;PCL:0;RULEID:(5000110)(711020)(4605076)(610169)(8291501071);SRVR:HE1EUR02HT106;
X-Microsoft-Exchange-Diagnostics:
1;HE1EUR02HT106;3:cTX4rvoHoEKY19EnaUmW5lUiylNt7i6m3OpAFaPhCd8rDcunXwX7+lg4NZC5pItaImySm/o1vuJJILcJbuDa/FAiSWKUs6Z7OXXRmffrHXNwAGWE1fax3icsDfgDAM1kr6IKtXtapf3R1zD289WgQ9w7+CMQ/ECiN0Lyb2K/nd23AGak0Ajn6zn1qitpN9uG6sNka8yYePIQk6lKCYeiJ0/x3u7FQMo2vczjY7DURytPUoQ7zZqK9ltFaf6CfGqYBcVnEYijEZEq7PuKiUlYsj1vg9456pP8Zv8w2KQXR0bVXBGBKsjHY2aa5blM2eFb;25:t3JesWk8yt1ZaB/xiUXNWPHUHEHJi4ygfErBW0/MPAxs+P0cTbu0sjF6WscwtuokbfibQ+69JSAd5Di8y+Xsd30DpcphdQ+TzvnNgn0cbAaFOMHjKRB7qCkNzxqOREVCmopbliodoZ0u9eYknzhWLsuCTrZSyZdRDGYSrkjsSYmD/q9oScsvcwaCjjxROjhaVgso/zszyCqZ+hDgfOdXLOnE9FUjxV14aRsviJmIv4XuWm9rM6WJuiB7p8MfDb4MPWRc7ZeUU+XRPQEIRvETR5YyPuuZh5V6at/BCks/IWuixifjNcHJnwNyaRXb+W75OCdJ4xpOc8ArkggnsIvNng==;31:PhNQm0xGTAPtcJfs31wUs+UBOAVX3CgesFwz3ojpCQxDOzCkGfjGXStH1/VzwpvGsanhYrhxlL1UFaIwTcysieT/Rkv1r2WzI/Get2MhIQB4xZtzxnACWNx7fdJbW1khr+wMggF3aO/Tsl3mjdRiOMxhCwK6ghEkMkAL7pSdEAcXLLN7yMxTp2Xuzhz7LTscjQtbfaPBJO4fOl8GXlPRuahc9+jia3ARdaXsQGPZmvQ=
X-MS-TrafficTypeDiagnostic: HE1EUR02HT106:
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 167.99.77.41
X-SID-PRA: redacted
X-SID-Result: NONE
X-MS-Exchange-Organization-PCL: 2
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test:
BCL:0;PCL:0;RULEID:(444111676)(120799088)(1540499029)(950299008)(780499008)(52401285)(52601095)(52606095)(52602095)(52606095)(52602095)(52606095)(52602095)(52606095)(52602095)(52505095)(52501095)(52406095)(52402095)(82015058);SRVR:HE1EUR02HT106;BCL:0;PCL:0;RULEID:;SRVR:HE1EUR02HT106;
X-Microsoft-Exchange-Diagnostics:
1;HE1EUR02HT106;4:Gcxagpb0J9IVo/A4MiPewHqyRWJr1nlqVhvIR5gPeSYBRPVV7P3uoBAa1cynS0i4Y5zvNVtbubw0fZIVVcFQVwyYEIGJTNLG6Pswvn1w3/NOFox5K+1MXTziGGqYaF8nFZvhBhw+saf520AozR8UXqBnwvnFiZ2o3xHkfMufakHrZTTZKWdsUinDJqVFL5FEcul+GcOhyfKRp/nr4tRG7yvNLGbjuAS6xpzf3VH23iVuNCZW8xf4JypZdkhl+0DjcDoJ0C+nETVY+M5DRsOFxg==;6:YgT+wvplCTjhJwPC37Cv/XY+KMNrLKylCExkqm/2uNy0m206samsPjsmKq3HYA2tu9QaliHLh7rnw1+hFivIvq7Kg5nOdLv/AdKScuQBhHwYgalROJiN6Xq30XrPbBziGSidJDvXofFJ6PH0vmFw8eJ9Ew2fgh4Vxg+Rcfe6cBLsyhLntfuEkxPy1b54iz01IfUOR2blX9j+lqtbxk8gfJ5JEhp+FH9TgRdnsh3jwjls7ojIswNHlVpxg84ph+FEznqk0V+biO53gVTjXk6khTSWblR+N91Fiz+Onh5WvKV3bX4OHj6B+6Dxr1GKKzxCaPWZaVrTiUHMWSwdD1nNoBFkI50QH4A9WWYfhi8In0obVIdQ0kxXhlU4j/GotM015nWBEYFMOoSnAVN4dAGHtNrjGi4D462kvaqtxi5/TZJlDr9GZqVyDZxpRqfyw5CnhA6HQPWnp7F7A5o8GfX38g==;5:3QNiQa9+z4U7qs7Q47iNmrSdHsz2l0GlHcRRgsc30HQ1R5bD3qmHYagP0Mhmp9+3B/MajSZTBMqNmO5l5wXWVipmtZDzaCh29MQtLl9AFU+jD/1UB3jvcWNlHW5h0swV1qrAKJSHmgKC8b6ldYJIpFCIdJMAdfaeMGrRJqU7eXI=
X-Microsoft-Antispam-Message-Info:
OScyrcLS3cj+41qGSXqbyMMHEUtfIpLNQqBAxZd5VeYFYQZu+1HOPJOyns/kgvTnJVKX5emGk6tL2IoXuMbumne1bcnrDQ0yre2r70U1EJOkIY6oBYqOH3ysJJx0tRXKsxw2wrmMoklAoxakr7VKktTeBoio0vJ+GqYk5r5KL5semjWV4K30DuTj4/hrr168cWdhwKv8/vPaC6VmeNdvpc1DOXaNSRneg8Q134tyCE/MoEziic7Frni8ndzhdvegikfEdOE3bqlkehAMG7kxdoelDNWWlwVvJFcbHGolwkje5VJ2kxm6k1gOrmCTeQ+EcxM/8W8G9Ivu3kmYOZW1VJt0p03KOEDmLanA426G0OEFtdGooqeZhRWZA65ATRPN/F/j/ezz6ttCwJbbZqFMCg==
X-Microsoft-Exchange-Diagnostics:
1;HE1EUR02HT106;7:im+5WzV2Djm6aJY+a5pMU/NZ0S/Zs7VAOErtIPd+fEefLXfl5ud30t/euB8blebHBqb6t0jkEdFnejd4BMuUSPsy0jACPVdNajhb4+g2mLj4JZk9Tnn3A9GWXxfoNGTo2cQcbHO9CrXRYDM2oWdST2LDBLHc+FLxPqKy9wyew4VFKYHAd9+SHKznrgS6OiXwlU1lSW/4ulmg2yWoYKPIctnaftN9a6SyCnDQiosHFXKSI+5i9UFElTyzoQNS8l52
X-OriginatorOrg: live.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Aug 2018 00:25:42.8889
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: c0fde51d-3c28-486b-6e66-08d5f7455147
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
f12efbb0-867f-4c93-8261-502eceebfafa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR02HT106
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.0250945
X-MS-Exchange-Processed-By-BccFoldering: 15.20.0995.000
Importance: high
X-Priority: 1
X-Microsoft-Exchange-Diagnostics:
1;DB6PR0901MB0840;27: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
X-Microsoft-Antispam-Mailbox-Delivery:
ucf:0;jmr:0;ex:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(5062000261)(5061607266)(5061608174)(1007183)(4900095)(4920089)(6320004)(4923001);RF:JunkEmail;
X-Message-Info:
qoGN4b5S4yrj5hA6ER+AykNieONlpOBLadWZwJKw+KsRWx9WH+snuFEy6S51l8HwSeAEkZ+hPvvwFUJjhXKdqhBYyH+MZRdIngQeoR2LAhLE4yUNJnnFD1m0k9RhNTwMMjLd5Fpuo2sXTSximziY1vx1gi/HqHTNWGgxnPUh52dX0ANLZVL9ac0wCALxHmeN2JhkjJaXzEbz4T/TOOgEMA==
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0zO1NDTD02
X-Microsoft-Antispam-Message-Info:
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
MIME-Version: 1.0

<html>
<head>
<meta http-equiv=“Content-Type” content=“text/html; charset=us-ascii”></head>
<style>
PORN4c51631e-d6d9-d9cb-ed0d-557e9df04c6f
PORNbf1b6126-fad1-6228-da1f-9a16399cdcf9
PORN15ad2ef2-86ae-352b-5990-1a9d54b247c2
PORN3b23842a-b3b9-5b77-8d16-f075bcae2156
PORN915ff6ff-2a2e-d9eb-c748-2d44ea88b2f6
PORN430ea892-dbf6-af9d-bea9-ce4f2d05b0c4
PORN62f2448c-a43e-cf33-e31a-ef424e0834f8
PORN50e73f9b-cc82-c229-6b79-04cea643737d
PORN2898c2ad-3e27-20e3-59c2-3845527b375d
PORN5c8ba3f7-672b-0642-8442-679449aa30d3
PORN437bd3e8-4570-cc17-323b-c66fd2d4cf83
PORN2474b1b4-88ca-1664-0e58-b5d64253a6ae
PORNf58ec3ef-1cb4-bf75-1a46-e23242058736
PORN96b57fa7-382f-7d4a-49c3-53a24e4b8d53
PORN4e00d38d-632a-80c4-26dc-67aad83ef3f5
PORNe5e035ab-4c19-b745-aca1-c94d186df953
PORNd882e3a7-2540-b52e-b495-76584b2395de
PORN77f0b633-187a-8e19-713f-0e94e4f906c7
PORN402b9455-4bde-8acc-a6aa-f2c6d354e642
PORNb7e0fa09-1f61-327b-88bb-004c046e8ed6
PORN63032448-e2c4-6472-1d18-e140a740e67d
PORN966196e7-2eff-ceb5-2e6e-0211637312eb
PORNff7010e5-9a09-c53a-15b8-ec5b22342e16
PORN64decb8d-cb21-84a3-63b7-6c3d77993762
PORNee51bcd4-ba94-11bc-e665-ba76b9960495
PORN4c51631e-d6d9-d9cb-ed0d-557e9df04c6f
PORNbf1b6126-fad1-6228-da1f-9a16399cdcf9
PORN15ad2ef2-86ae-352b-5990-1a9d54b247c2
PORN3b23842a-b3b9-5b77-8d16-f075bcae2156
PORN915ff6ff-2a2e-d9eb-c748-2d44ea88b2f6
PORN430ea892-dbf6-af9d-bea9-ce4f2d05b0c4
PORN62f2448c-a43e-cf33-e31a-ef424e0834f8
PORN50e73f9b-cc82-c229-6b79-04cea643737d
PORN2898c2ad-3e27-20e3-59c2-3845527b375d
PORN5c8ba3f7-672b-0642-8442-679449aa30d3
PORN437bd3e8-4570-cc17-323b-c66fd2d4cf83
PORN2474b1b4-88ca-1664-0e58-b5d64253a6ae
PORNf58ec3ef-1cb4-bf75-1a46-e23242058736
PORN96b57fa7-382f-7d4a-49c3-53a24e4b8d53
PORN4e00d38d-632a-80c4-26dc-67aad83ef3f5
PORNe5e035ab-4c19-b745-aca1-c94d186df953
PORNd882e3a7-2540-b52e-b495-76584b2395de
PORN77f0b633-187a-8e19-713f-0e94e4f906c7
PORN402b9455-4bde-8acc-a6aa-f2c6d354e642
PORNb7e0fa09-1f61-327b-88bb-004c046e8ed6
PORN63032448-e2c4-6472-1d18-e140a740e67d
PORN966196e7-2eff-ceb5-2e6e-0211637312eb
PORNff7010e5-9a09-c53a-15b8-ec5b22342e16
PORN64decb8d-cb21-84a3-63b7-6c3d77993762
PORNee51bcd4-ba94-11bc-e665-ba76b9960495

</style>

<body>

<center>

<a href=“http://actualcurso.xyz/71elsgfn9yofrx28n26h-x2sddsfwqxdkx3czu4g63y52b4b7abcn3c9fKcpxssefssjelkloplksjlksjcdnjlksjgfde0cxcsawehplknhejfgdepcdgsawelmdflmdflmdfperfperfcdnjkloperths2es5e1” style=“text-decoration: none;”>
<font size=“4” color=“#70ADEF”>
Stop overpaying for Health Insurance! Compare plans from the biggest companies!
</font></a>
<br><br>
<a href=“http://actualcurso.xyz/llo0t1oy263vuw4m7o2x-x2sddsfwqxdkx3czu4g63y52b4b7abcn3c9fKcpxssefssjelkloplksjlksjcdnjlksjgfde0cxcsawehplknhejfgdepcdgsawelmdflmdflmdfperfperfcdnjkloperths2es5e1”>
<img src=“http://actualcurso.xyz/rdM9CSD7DS0Z9X85Lcri3a6ec15cri12D3KGY04KMTJ6oid2400oidYBH4XDLSI3NPV3CtagoffertagDFRSR3PTK1PDZNAO7SLQP29BD3Y469P0FRR”></a>
<br>
<a href=“http://actualcurso.xyz/y59edi9r19sjydx95td1-x2sdsawe68wzq59pq62y0burfkmhc286jsqeacpxssawesjelkloplksjlksjcdnjlksjjefd0cxcdsfwhplknhejc9fKpcdgserwlmdflmdflmdfperfperfcdnjklopc9fKs2es5e1”>
<img src=“http://actualcurso.xyz/rdK3RANB9PFcri3a6ec15criEJKQRMZWZ2JUJ3LBoid2400oidAZW8DMO11JBLS4QPU9TtagunsubscribetagOOT8KPLEB0O5GYADX”></a>
<br>
<a href=“http://actualcurso.xyz/numajqvynk4p353bqvto-x2sdsefs8mnk2u96vqsx06fxiy4ou3je4jefdcpxssefssjelkloplksjlksjcdnjlksjc9fK0cxcserwhplknhejc9fKpcdgsawelmdflmdflmdfperfperfcdnjklopjefds2es5e1”>
<img src=“http://actualcurso.xyz/rd5yf6mlbo1vp1prbqqdrxcri3a6ec15criSXDPS1XFXLWPQ8TOX5FGRoid2400oidCBZIWA1HXIRDEHCV5SZQ0KtagunsubcampanytagS0QC7QR55IFMRUBMRO6GJEEWWXQF2FMVF”></a>
</center>
</body>
</html>

Answer 1

jamesc40183ea7fa102f8bbb7c August 1, 2018

Oh look, I’m not the only victim https://social.technet.microsoft.com/Forums/en-US/e7ecdd61-5fbe-4c60-bb12-6df641d80b23/cant-filter-spam-from-teslatechclub-or-americandreamservices-domains?forum=outlook

Reply Report

Answer 2

jamesc40183ea7fa102f8bbb7c August 1, 2018

Oh look another, this just shows how frequently they’re coming in if I’m receiving one just after posting this thread. This is about my 10th today.

Received: from HE1EUR01HT198.eop-EUR01.prod.protection.outlook.com
(2603:10a6:6::23) by DB6PR0901MB0840.eurprd09.prod.outlook.com with HTTPS via
DB6PR04CA0010.EURPRD04.PROD.OUTLOOK.COM; Wed, 1 Aug 2018 18:30:15 +0000
Received: from HE1EUR01FT036.eop-EUR01.prod.protection.outlook.com
(10.152.0.53) by HE1EUR01HT198.eop-EUR01.prod.protection.outlook.com
(10.152.1.165) with Microsoft SMTP Server (version=TLS12,
cipher=TLSECDHERSAWITHAES256CBCSHA384_P384) id 15.20.1017.14; Wed, 1
Aug 2018 18:30:15 +0000
Authentication-Results: spf=none (sender IP is 206.189.158.221)
smtp.mailfrom=americandream.services; live.com; dkim=none (message not
signed) header.d=none;live.com; dmarc=none action=none
header.from=gwfdvc8liwy3yywlwmy7.americandream.services;
Received-SPF: None (protection.outlook.com: americandream.services does not
designate permitted sender hosts)
Received: from itc.gov (206.189.158.221) by
HE1EUR01FT036.mail.protection.outlook.com (10.152.1.30) with Microsoft SMTP
Server id 15.20.1038.3 via Frontend Transport; Wed, 1 Aug 2018 18:30:14 +0000
X-IncomingTopHeaderMarker: OriginalChecksum:2D592E40774979212F2C53A850BE4FD8B6CB153651B82ECE7D49539808E0B9A9;UpperCasedChecksum:9DA57C8E23F366761D01C82A259F1797F9A2A9A1966EEE53E5336A2606E1F65C;SizeAsReceived:451;Count:10
From: Video Saver
gwfdvc8liwy3yywlwmy7@gwfdvc8liwy3yywlwmy7.americandream.services
Reply-To: d3vmmd3dzct50x7gnbx0@americandream.services
Sender: Video Saver <redacted>
To: <redacted>
Date: Wed, 1 Aug 2018 18:30:09 +0000
Subject: In 2019 THIS Will Change Everything!
List-Unsubscribe: <>
Content-Type: text/html; charset=“us-ascii”;
boundary=“y244zhsi8v1vkk684o9s.1118834.y244zhsi8v1vkk684o9s”
X-IncomingHeaderCount: 10
Message-ID: 899dc5d4-698c-4d2f-881c-57830ebe7e02@HE1EUR01FT036.eop-EUR01.prod.protection.outlook.com
Return-Path: contact@americandream.services
X-MS-Exchange-Organization-ExpirationStartTime: 01 Aug 2018 18:30:15.1025
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: Original Submit
X-MS-Exchange-Organization-ExpirationInterval: 2:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: Original Submit
X-MS-Exchange-Organization-Network-Message-Id: 90918c47-dbf5-4ca8-7a0a-08d5f7dcd333
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-Microsoft-Exchange-Diagnostics: 1;HE1EUR01FT036;1:T8UcUBVC0iq4LFPGaLMeIFDvjGqpqH0hSIPzogkaybWsrYWtITe8WtBHCNSZ8Y2iTpmr4dsrhbvEHkdR6xRxG6jb2JuzBTbp/v1kcN5BiKnpd8r7T9Ei8g+aPg/IGT79
X-Forefront-Antispam-Report: EFV:NLI;
X-MS-Exchange-Organization-AuthSource:
HE1EUR01FT036.eop-EUR01.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-UserLastLogonTime: 8/1/2018 6:28:55 PM
X-MS-Office365-Filtering-Correlation-Id: 90918c47-dbf5-4ca8-7a0a-08d5f7dcd333
X-Microsoft-Antispam:
BCL:0;PCL:0;RULEID:(5000110)(711020)(4605076)(610169)(8291501071);SRVR:HE1EUR01HT198;
X-Microsoft-Exchange-Diagnostics:
1;HE1EUR01HT198;3:42KxXYUTEpds3HF7+EWw2iiNTX6l+Z5EUMVwD892RZ4LKHGITzgwi66vKBMZi54VRmb65kCcU3L2p3CFAPxifJIDfXqIThxr8YwyhxmrUvHUn0F8oeN/VmY4VpMcSpHTR3toQcC300dwgDRlIRRJRV4ZqvovkE3rlS/igAEEJwQbvPnEkFqdLRiLfz58BqfNiLMW5YRoX4W6xQyEJ+de7tn9ep46oBWSuZ6RxtuzSuR+gGEAKoRC49qMbpuTG9f5v2uMSzTLYxvaTB846tVPDgcEaKJLO8nEd3TesP08DBVuF0CWaurNjX8gtp0atEQ8;25:rhF5h2Pj4qN2ET00ZkS55QmhbRcbqCG+8RG/RmpXBZor2XOXoJuFOTt5xu4q9ZG1rP9jMR6lmavKiqG0CLHEPhhZrpjsROsWc+KuZ5IoqbRoQhS88HjDZjKMrXEL7gWSj+HoznXib3iu2PZxDgZf/1WeG7pnfqO/pnQLppxgBH2l/LrVTE7PXEibI+Dq2zW6dnIU6PeEsUO0oDT6PWGpHbwPUGInJRrLHpFxJqgOKwuNzGWFWy6SpfGy1WgiR78Yi0q6gTQgKmgC3qgPoZqtMcBwwybxWq8MHFqKqaN5QltNbD6B3qqbWVTbT/+oiIcabYYUMl4MzAL8FBuk0IgkHg==;31:txgBAmHhuEXHlNWCc15/h/9RbLulH/7LqVOM/uihRW9NLEjVzSgLJ/0EY/GUZNI3LBZ8yNvbOtNCZPwpoDGbbgd8X9ryvF1hqSLgYw+krYNp+Wzs6TBoZanLoVvvbMR0oYtuZ/ILvQmHWQiyuHKFwjNH1NjOukmGyUfwgBk+QCdWoFkRo2gjhWTlrB+PloXr4HLIgQE1TqPWP+YjWgE0205LVsuQB+w4vVyy9wu3pVE=
X-MS-TrafficTypeDiagnostic: HE1EUR01HT198:
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 206.189.158.221
X-SID-PRA: redacted
X-SID-Result: NONE
X-MS-Exchange-Organization-PCL: 2
X-Exchange-Antispam-Report-Test: UriScan:(209352067349851);
X-Exchange-Antispam-Report-CFA-Test:
BCL:0;PCL:0;RULEID:(444111676)(120799088)(780499008)(950299008)(52401285)(52601095)(52505095)(52503095)(52406095)(82015058);SRVR:HE1EUR01HT198;BCL:0;PCL:0;RULEID:;SRVR:HE1EUR01HT198;
X-Microsoft-Exchange-Diagnostics:
1;HE1EUR01HT198;4:53G50avIJDjOlr2YRW13nC8DSDgzlobxg/1n7s2FCg9V7D6UV83Fq3pBCV8K1Qez1udguc7oSJWJqNofrVFIDYHkdroz7iBVYtnfNBQky3zgyOORxnM7sLUWvIyyGmkadQEEHHTdB6G+YCpYYXVkaS3Preauig5YP+Ec2vgY/7DSCJ6/kk3E/STDq9AO9YQLnMKyJH/nqTLDbnvh11V6Sqa9dSE4va1kvvn5I6eF7rI3PZlGMx1X0vvAf9buv82ufJlo+gjbyPkvj1dHf8zs2F1JOcl8m460OcwU2TaIpow/G7/LyQ/pPCTcW323S7Br;6:Ct+ZMd0fnf6l3PeWquN+XavKMilkiASL0Ii2RE6ud8MOjSR/SshqqdPXigL6TrO8yf0/gTRpbWmh+W45c7jPAHcjA+/X7mmcj7fG1aVKCC3nV5zgfHkVx3buKAa/gTplhF+P4Ofg0MGM9jAALMf1gDBHQaNd0873kF0ngV3DHdf2vFB45TypCSMwQ9AZLnhO4F55llQCZr+oEK61QzuHs5oU4vRmnj/pNfbkAQN3gDRDImGrcYq6NIP2ojo08CL54+pVOnD1qDepYEoi93ryS0B/oOS253IRkzzgda9baxW475GjFgnPmRZrGsof6K9+1o3o6ahBYygXQOzVGuZFXEjG/+HhC/5IcZin5G6d3zQoJEtDbIa2t+Slh39QMQbWyYcKF7o2a6vnEnpxvYWhLRUNNbJFmTtCw8XyPQx3On5jJFUaI0Q7Vs2IbSJMbe9JzwSCCNn/56Xf3rNBSe39UA==
X-Microsoft-Antispam-Message-Info:
C/Rh5L5niLJCSbiuZFvkqeELx9FC+yjjmDf84cIHyXzJBnlD/3csbGe67vJ9VrrlX5Fp8df8dCMg5KnX65Y+YcfU0dAei2Gllld+/s5yHEwDCEglXuTL1N2Dzw2Jcxev8DfQ+oCKbwhW0qASPXWWDISRxWJGYXP/eBrSI/4suzzYacpoC7wuPseQ929kYR9y8eZKQPENSTovCjut65tN25uMORwU20hN5EDRGMUggLlFVqX+Y5pnrt1fdOgOQb1JZKplvsm08flTBUTlc6ACrYzq9WvPLQnt/Nwu0T51p6BJt76dqAC1w8CXbXnWE3uAsNhZtV0lgKUaDtYB5VbShQ/4q9A6KApPYj/Mw6Go1s7QK5IWI9JvAftH+yO0lI22
X-Microsoft-Exchange-Diagnostics:
1;HE1EUR01HT198;5:esKw/hy41EW3yuPmJImx+UpDyNaJz+GM97/MmqKpkWgmdLzFVRjO9xaj3Zw8CjmfGgjuk7ftlZupde6wy499K89o0zIW6kZW9WW+Ndq6WLQkRi+FweVKhHS28wM6Xb5ctLocxIHXKk3U22FrIRjbSIevxu1fV52uu/5dDfn+qQ0=;7:4V+BIzcVUvK2iOWgvn1Q26ckHfZhhJpc9WT+nMQaA9T5Est67ZBrQe96AfmBY8U3vogSGuWLBUhT5Al5y6KUHfxcQa5v9qZgQF/vgMiqFZC0US99w/YxJE0M8tbbTKYwPZQ4BF9IAK2oM5X8UrjTmr9G4GHbVyXPYgsRetRM7R12mcz/ahi4PSHPXpuAVDvpUrviNaf8Y7j0w/j+O07xNE2mjNOHRNSyN8p1BQJxj07tc8eqfhU66wKzXYDD24Hz
X-OriginatorOrg: live.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Aug 2018 18:30:14.8681
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 90918c47-dbf5-4ca8-7a0a-08d5f7dcd333
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
f12efbb0-867f-4c93-8261-502eceebfafa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR01HT198
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.0741733
X-MS-Exchange-Processed-By-BccFoldering: 15.20.0995.000
Importance: high
X-Priority: 1
X-Microsoft-Exchange-Diagnostics:
1;DB6PR0901MB0840;27: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
X-Microsoft-Antispam-Mailbox-Delivery:
ucf:0;jmr:0;ex:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(5062000261)(5061607266)(5061608174)(1007183)(4900095)(4920089)(6325004)(4923001);RF:JunkEmail;
X-Message-Info:
qoGN4b5S4yrmAeNVLAMFDslnOcoUsFCaH3ZBO/myiGJanS2jv0Ihc6J25otbUERcWYyxEB6AGVP6iBh+H/+J9X6G2x1ITUMnZC5uF9pLaA8VpZQg7NJBt5A5CnKr5V9wuCteRM+p8XyOOC8oML27MHGqBLyDRUR0x7ozGjZAUODgZxRbzmgQfuPYD0aCf0x9C+IcWHHVZ8Hn4CwAR4/wDA==
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
X-Microsoft-Antispam-Message-Info:
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
MIME-Version: 1.0

<html>
<head>
<meta http-equiv=“Content-Type” content=“text/html; charset=us-ascii”></head>
<style>
PORN4c51631e-d6d9-d9cb-ed0d-557e9df04c6f
PORNbf1b6126-fad1-6228-da1f-9a16399cdcf9
PORN15ad2ef2-86ae-352b-5990-1a9d54b247c2
PORN3b23842a-b3b9-5b77-8d16-f075bcae2156
PORN915ff6ff-2a2e-d9eb-c748-2d44ea88b2f6
PORN430ea892-dbf6-af9d-bea9-ce4f2d05b0c4
PORN62f2448c-a43e-cf33-e31a-ef424e0834f8
PORN50e73f9b-cc82-c229-6b79-04cea643737d
PORN2898c2ad-3e27-20e3-59c2-3845527b375d
PORN5c8ba3f7-672b-0642-8442-679449aa30d3
PORN437bd3e8-4570-cc17-323b-c66fd2d4cf83
PORN2474b1b4-88ca-1664-0e58-b5d64253a6ae
PORNf58ec3ef-1cb4-bf75-1a46-e23242058736
PORN96b57fa7-382f-7d4a-49c3-53a24e4b8d53
PORN4e00d38d-632a-80c4-26dc-67aad83ef3f5
PORNe5e035ab-4c19-b745-aca1-c94d186df953
PORNd882e3a7-2540-b52e-b495-76584b2395de
PORN77f0b633-187a-8e19-713f-0e94e4f906c7
PORN402b9455-4bde-8acc-a6aa-f2c6d354e642
PORNb7e0fa09-1f61-327b-88bb-004c046e8ed6
PORN63032448-e2c4-6472-1d18-e140a740e67d
PORN966196e7-2eff-ceb5-2e6e-0211637312eb
PORNff7010e5-9a09-c53a-15b8-ec5b22342e16
PORN64decb8d-cb21-84a3-63b7-6c3d77993762
PORNee51bcd4-ba94-11bc-e665-ba76b9960495
PORN4c51631e-d6d9-d9cb-ed0d-557e9df04c6f
PORNbf1b6126-fad1-6228-da1f-9a16399cdcf9
PORN15ad2ef2-86ae-352b-5990-1a9d54b247c2
PORN3b23842a-b3b9-5b77-8d16-f075bcae2156
PORN915ff6ff-2a2e-d9eb-c748-2d44ea88b2f6
PORN430ea892-dbf6-af9d-bea9-ce4f2d05b0c4
PORN62f2448c-a43e-cf33-e31a-ef424e0834f8
PORN50e73f9b-cc82-c229-6b79-04cea643737d
PORN2898c2ad-3e27-20e3-59c2-3845527b375d
PORN5c8ba3f7-672b-0642-8442-679449aa30d3
PORN437bd3e8-4570-cc17-323b-c66fd2d4cf83
PORN2474b1b4-88ca-1664-0e58-b5d64253a6ae
PORNf58ec3ef-1cb4-bf75-1a46-e23242058736
PORN96b57fa7-382f-7d4a-49c3-53a24e4b8d53
PORN4e00d38d-632a-80c4-26dc-67aad83ef3f5
PORNe5e035ab-4c19-b745-aca1-c94d186df953
PORNd882e3a7-2540-b52e-b495-76584b2395de
PORN77f0b633-187a-8e19-713f-0e94e4f906c7
PORN402b9455-4bde-8acc-a6aa-f2c6d354e642
PORNb7e0fa09-1f61-327b-88bb-004c046e8ed6
PORN63032448-e2c4-6472-1d18-e140a740e67d
PORN966196e7-2eff-ceb5-2e6e-0211637312eb
PORNff7010e5-9a09-c53a-15b8-ec5b22342e16
PORN64decb8d-cb21-84a3-63b7-6c3d77993762
PORNee51bcd4-ba94-11bc-e665-ba76b9960495

</style>

<body>

<center>

<a href=“http://a1prohibido.online /1le32pm56zr4a4zrs5z2-x2sddsfwyilmi1p1c17c406d4g1yisp24c9fKcpxssefssjellksjlmdfperflksjlmdfgfde0cxcsawehplknhejfgdepcdgsawelmdflmdflmdfperfperfcdnjkloperths2es5e1” style=“text-decoration: none;”>
<font size=“4” color=“#70ADEF”>
In 2019 THIS Will Change Everything!
</font></a>
<br><br>
<a href=“http://a1prohibido.online /r57swc128marpj6ntsnk-x2sddsfwyilmi1p1c17c406d4g1yisp24c9fKcpxssefssjellksjlmdfperflksjlmdfgfde0cxcsawehplknhejfgdepcdgsawelmdflmdflmdfperfperfcdnjkloperths2es5e1”>
<img src=“http://a1prohibido.online /rd3MAONBE68OL087Jcri332e882cri721EEZZCR84CQEoid2350oidAPSR5PD0TG2SEY6tagoffertag9XH488UJ2S1R11RMW6EDQYGXHHU2RWJWTE2”></a>
<br>
<a href=“http://a1prohibido.online /kz8o99sycqcb6nfg05oo-x2sdsawe8hjm0o8i92get9gczpszcx7b2sqeacpxssawesjellksjlmdfperflksjlmdfjefd0cxcdsfwhplknhejc9fKpcdgserwlmdflmdflmdfperfperfcdnjklopc9fKs2es5e1”>
<img src=“http://a1prohibido.online /rdA2S7PFN5Ucri332e882cri2XAL5QCWAFESX89Foid2350oidOJW8604THA4I0YGNPZKtagunsubscribetagNZBKIWQ4VVHASDFWI”></a>
<br>
<a href=“http://a1prohibido.online /h466legdovd6fbzjovgp-x2sdsefs7ofvqt59ep35jayylej2wqd54jefdcpxssefssjellksjlmdfperflksjlmdfc9fK0cxcserwhplknhejc9fKpcdgsawelmdflmdflmdfperfperfcdnjklopjefds2es5e1”>
<img src=“http://a1prohibido.online /rdclceeacja1y9duuc01tmcri332e882cri9N6VKFUW4HMGHW0D1KIRToid2350oid059LG80R682TKGXSJZHMS6tagunsubcampanytagH5BMMK33H1V0VZTSC912MUD7F3OAWZGCU”></a>
</center>
</body>
</html>

Reply Report

Answer 3

jarland August 1, 2018

Hello friend,

Thank you for taking a concern with this. It is extremely important that people like you and I take interest in these things to tackle abuse where possible. Please be sure that you are submitting the full data here:

https://www.digitalocean.com/company/contact/#abuse

This helps our abuse team track the complaints and keep up with them, as well as ensuring that the data is best leveraged to assist in efforts to prevent abuse.

Kind Regards,
Jarland

Reply Report

jamesc40183ea7fa102f8bbb7c August 1, 2018

I have been doing it repeatedly for days and days, no reply and no action.... same spam coming from the same domains and IP ranges.
Reply Report
- jarland August 1, 2018
  
  That doesn’t mean it’s from the same account or user from our view, they may be highly intelligent and difficult to catch. The more reports you send us, the more data we have to help us catch it.
  
  Reply Report
  
  jamesc40183ea7fa102f8bbb7c August 1, 2018
  
  Well just so you can see how much of a menace they are, this it just today. All from Digital Ocean, all from the same domains. 1 day and it has been like this for weeks.
  
  [img]http://oi68.tinypic.com/e8q4bp.jpg[/img]
  
  http://oi68.tinypic.com/e8q4bp.jpg
  
  Appreciate the help you can offer.
  
  Reply Report
  
  jarland August 1, 2018
  
  Thank you for that. I’ll work with our abuse team to see if we can capture the patterns that we can use to halt it permanently. It is always an uphill battle against these kinds of things for a cloud provider, as we provide self service account creation and server creation. However, we fight that battle daily and continue to improve on it based on reports like yours.
  
  Reply Report

Answer 4

jamesc40183ea7fa102f8bbb7c August 1, 2018

I have been doing it repeatedly for days and days, no reply and no action.... same spam coming from the same domains and IP ranges.
Reply Report
- jarland August 1, 2018
  
  That doesn’t mean it’s from the same account or user from our view, they may be highly intelligent and difficult to catch. The more reports you send us, the more data we have to help us catch it.
  
  Reply Report
  
  jamesc40183ea7fa102f8bbb7c August 1, 2018
  
  Well just so you can see how much of a menace they are, this it just today. All from Digital Ocean, all from the same domains. 1 day and it has been like this for weeks.
  
  [img]http://oi68.tinypic.com/e8q4bp.jpg[/img]
  
  http://oi68.tinypic.com/e8q4bp.jpg
  
  Appreciate the help you can offer.
  
  Reply Report
  
  jarland August 1, 2018
  
  Thank you for that. I’ll work with our abuse team to see if we can capture the patterns that we can use to halt it permanently. It is always an uphill battle against these kinds of things for a cloud provider, as we provide self service account creation and server creation. However, we fight that battle daily and continue to improve on it based on reports like yours.
  
  Reply Report

Answer 5

jarland August 3, 2018

As a note to anyone coming across this and facing a similar scenario, James and I took this conversation to email where we were able to collaborate and resolve this issue.

The battle against spam does not end, there will always be another event to handle in some capacity (whether similar to this one or otherwise). It is for that reason that I want to stress the importance of reporting these issues. Those reports directly help us both by providing the information that we need to track down the root of the problem and resolve it.

When in doubt, never hesitate to reach out to us. We love you all and want to help you make the internet a little bit better every day.

If you find any abuse coming from our networks, please be sure to submit detailed information here: https://www.digitalocean.com/company/contact/#abuse

Reply Report

Answer 6

jamesc40183ea7fa102f8bbb7c August 4, 2018

Thanks to Jarland who has been brilliant at helping, really great work. These have totally stopped.

Reply Report

Answer 7

gqboyott September 20, 2018

Apparently not fully resolved - I have 16 samples of abuse from that same domain: a1prohibido.host,

as well as similar amounts from
a1prohibido.club
a1prohibido.online
a1prohibido.tech
a1prohibido.xyz
actualcurso.host
actualcurso.online
actualcurso.tech
actualcurso.xyz
almostpes.xyz
artcaslte.club

– all from same spam system just mixing and matching the above spam domains to same headlines and spam email formats and rotating their use of digitalocean for sending.

Reply Report

Answer 8

gqboyott September 20, 2018

Just received another…
Received: from BL2NAM02HT114.eop-nam02.prod.protection.outlook.com
(2603:10b6:4:1::24) by DM5PR16MB2149.namprd16.prod.outlook.com with HTTPS via
DM5PR12CA0014.NAMPRD12.PROD.OUTLOOK.COM; Thu, 20 Sep 2018 12:21:45 +0000
Received: from BL2NAM02FT026.eop-nam02.prod.protection.outlook.com
(10.152.76.55) by BL2NAM02HT114.eop-nam02.prod.protection.outlook.com
(10.152.76.94) with Microsoft SMTP Server (version=TLS12,
cipher=TLSECDHERSAWITHAES256CBCSHA384_P384) id 15.20.1164.13; Thu, 20
Sep 2018 12:21:45 +0000
Authentication-Results: spf=fail (sender IP is 142.93.195.86)
smtp.mailfrom=coffeeaddiclife.com; hotmail.com; dkim=none (message not
signed) header.d=none;hotmail.com; dmarc=none action=none
header.from=coffeeaddiclife.com;
Received-SPF: Fail (protection.outlook.com: domain of coffeeaddiclife.com does
not designate 142.93.195.86 as permitted sender)
receiver=protection.outlook.com; client-ip=142.93.195.86; helo=iutinc.gov;
Received: from iutinc.gov (142.93.195.86) by
BL2NAM02FT026.mail.protection.outlook.com (10.152.77.156) with Microsoft SMTP
Server id 15.20.1164.13 via Frontend Transport; Thu, 20 Sep 2018 12:21:45
+0000
X-IncomingTopHeaderMarker: OriginalChecksum:E8F9B6DF5DD92D5A57DEA497C4B9CD59B8E9E22969DC9D1D2D0A60E226E1438F;UpperCasedChecksum:96E2A6C4D4B2A5C32A6277DD8D36C3B6F10932F431BD8BE90D2E80D1833B73C7;SizeAsReceived:462;Count:11
From: OilChangeCoupons contact@coffeeaddiclife.com
Reply-To: u53sqgsfy0cx8isx9bzs@coffeeaddiclife.com
Sender: OilChangeCoupons <>
To: <>
Date: Thu, 20 Sep 2018 12:21:45 +0000
Importance: high
Priority: 1
Subject: Need an Oil Change? ?? | Coupon Deals
List-Unsubscribe: <>
X-Message-Flag: Follow-Up
Content-Type: text/html; charset=“us-ascii”;
boundary=“zvy4ud6vbmqhq77mpmul.13352861.zvy4ud6vbmqhq77mpmul”
X-IncomingHeaderCount: 11
Message-ID: 0fc26e42-e35a-425f-801f-7a3406af2e4c@BL2NAM02FT026.eop-nam02.prod.protection.outlook.com
Return-Path: contact@coffeeaddiclife.com
X-MS-Exchange-Organization-ExpirationStartTime: 20 Sep 2018 12:21:45.1562
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: Original Submit
X-MS-Exchange-Organization-ExpirationInterval: 2:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: Original Submit
X-MS-Exchange-Organization-Network-Message-Id: 0880463c-5094-4ff3-e8af-08d61ef3a14c
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-Microsoft-Exchange-Diagnostics: 1;BL2NAM02FT026;1:W+cItvuzSHShxvOpQUORmfPt/tPSB80c8CVzBZOUzBJW3nbnQdb4yT+mFqFZkzDyN/RuvAyKPihwQLkH+gknYu6dCD1PLAMGz3md2H7tZKLgdqvJ0X5I4ZMxDG20PP7v
X-Forefront-Antispam-Report: EFV:NLI;
MIME-Version: 1.0
X-MS-Exchange-Organization-AuthSource:
BL2NAM02FT026.eop-nam02.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 0880463c-5094-4ff3-e8af-08d61ef3a14c
X-Microsoft-Antispam:
BCL:0;PCL:0;RULEID:(5000110)(711020)(4605076)(610169)(8291501071);SRVR:BL2NAM02HT114;
X-Microsoft-Exchange-Diagnostics:
1;BL2NAM02HT114;3:ZBiKaYGgHvcVExq2Uic5IMGz3/EQhI/R6jGyqn0A5W65UweFhznfh9YoXaYvw40abkxmIClVVe2t1zCupZPJicN4eEs+++AXUpC5zlKcza3AQXU4xmCZ2MxBG97j08Mebm15E98oS+5TEqt1seADiBwlYuG1pkiNi65nvMWtdoUp3bg+rey0U/h9dz5DqAi7lEeeDUiy+DGV9K7q42DaHFG3vPxcJcE7pwBI/nPgaKLpwfo0t63nsta9CRiCrCzBgpRmQT4tWhzGfrbvI4F4vXeGNzc6oktOFoknhdilcj4Bl7kqRtaKqOlJmbTGVkcG;25:2Cnf4R4UJUa9Hh513S1gfNLij0Wdj+ZEGTIUoCmK5OqxrQxwR4kdKUgm1nGREJKlDe/QfE8Sgp78LBu6P8ZArwxcCEpXnqHZOfj5Bkoh+ncAjvdSdorJwaL2W805ZTb/NLBgN+/oR0kCPiOGXqrCC6lIeMazHn/dxT8NE2GNwkUWJyGKw8Xcu4BS1ROLvYf6y3js/MrupFhViS5ADQUgavVmYa7nlqAhpkeNj9CgUkE6NrhvFvxQCOEu594+OpGgEbmEVHGLPIMWSragnLOjsfxGkGyjLlxHu8FniwZE9H9mU0jgrpHk9iV7X+LJBYtcw8lVAZNMkxH+d/EWGNNfZQ==;31:zO96mC0qqRkzNAPL9sEx1yg0w/4DXIbl8BhHaA2ak1KvDkFS3EOhKUCsk48yMdIIaeJVcIsOXWbKrYh/Xc349E4zOIhyP3LJwkbokB6KZJd5WYovfpDHoN8moTPRDX+0RGIWiZXY63WJ2iyUt+D0DtAJlvVA4mm+/+QwUaYnWVb7bDyv6dVoFO7h5PqgpwrbkMHs6CMkWM7cWrVKQdh6Z3kgPaHrrJXmL4RizipHHD0=
X-MS-TrafficTypeDiagnostic: BL2NAM02HT114:
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 142.93.195.86
X-SID-Result: NONE
X-MS-Exchange-Organization-PCL: 2
X-Exchange-Antispam-Report-Test: UriScan:(254622191361283);
X-Exchange-Antispam-Report-CFA-Test:
BCL:0;PCL:0;RULEID:(444111676)(120799101)(780499021)(950299021)(2217020)(52401380)(52601095)(52606095)(52602095)(52606095)(52602095)(52606095)(52602095)(52606095)(52602095)(52505095)(52501095)(52406095)(52402095)(88860193)(82015058);SRVR:BL2NAM02HT114;BCL:0;PCL:0;RULEID:;SRVR:BL2NAM02HT114;
X-Microsoft-Exchange-Diagnostics:
1;BL2NAM02HT114;4:YmSvzUhr87HcQA9v+xCbdSR9XIo7oSO4neZiRzy4TWBDWNcGlbbrCU5iVDgcChuDngeQkbKGf+VVepaMshKT5VXTmgR4Vnp51Y4SvaUZlX0goA8EiqK2kQpQU/1y7kFcl0QmEWa02FrAsLA110gLR27SkcPqsWhaewA6Kw5SYwKnBpS/dT0UrLU9W7NCpqmG8Asz+MkSS0Zo5FCZi9+aGtkEO994nxWiL27ggkV7L6E5xN0HCkLtAr+GnCbrTx8enSs747asufvHeWDmKQ8dThOVzWZBgXuESFXO0gnkX6c9ScF9iOS6ftMhho/5aWaa;6:cv53xa651PSkTt11a1Zv2PKYy0XKGSFYzyqC2rjcSsx69LMXM5X/iwSVh9tDqAWdiVg2H88FKL1Ipng1C+I5QWlHL4Jnnjb2CNcOK7Xn5CbM0iShLTFlmOPnIeYAkINebA2ji/STLWFlZBKCl647HAJS6C91xK4iflTtRammoWcH4lKgxoZHsDxVjsWARpeg6tyfajMzHc2oopcKwWN2WZk+Lo1j37qeNx7GSoiQgUmO4LnsJonLlWIesoX/F4GpsHUYVC16jawIpcgT1oxTCjOV9M4kDwQAwDmKlsOkJWyW0cS118eHmvowQLF5VGxd194hHgGuxg0xvmSUt7Y797WkLdkdoC2D2+Ty/N/YlfUFyjZtsVAoQkVNUamGTrWrXie8KtkZu3s/stbyMdQBUA3JRW0AtSryMNLo583t9AcGRwVQ1aqbBAUy8NJlGLpZivwUBkNCpQwk812RXCkAyw==
X-Microsoft-Exchange-Diagnostics:
1;BL2NAM02HT114;5:KVNIQJ7aNRnhnNLCuDmyf3wytLKeXNHO6se2sENPdnZw4NT3NHK1VFnMdU3t40IdCLX7UN0uRi+oatlXkSqtL6EMavaRMjngNVyh4xZARFPKHCEYKH35DaEJRAUYp/saKP4RTvV88P/AeceK7vmQPXERDxbYzfnEJNDwhaiKNhk=;7:5rK/w29uQbombrtM0nPt6QWeh0S4+c+p4nWNZ0E8KH0XlDGmjm4wkpY4UN/ce3A0zsoijzJ3zBA9cceLuF+q8PZWcDNSLipvzvs2W/QAYkv/fqA0/sJlRHWZeUpR99i8sJrK2wgZ9u8J45qpOX2Y+3JHdzoAtySl/4zQjEoP3HoNhRbnTknicSlMTPaVnVqfREPj/e3HuiW50lzVgal89kIkfj/5Alb2bh2XsC62cj4PUZvBxtYbVXRcrXgIdD1X
X-OriginatorOrg: hotmail.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Sep 2018 12:21:45.0780
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 0880463c-5094-4ff3-e8af-08d61ef3a14c
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
f12efbb0-867f-4c93-8261-502eceebfafa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL2NAM02HT114
X-MS-Exchange-Transport-EndToEndLatency: 00:00:00.7905382
X-MS-Exchange-Processed-By-BccFoldering: 15.20.1143.017
X-MS-Exchange-Organization-SCL: 6
X-Message-Info:
qoGN4b5S4yrmAeNVLAMFDslnOcoUsFCaH3ZBO/myiGJanS2jv0Ihc1yYA3KreasXZEskiH6s0aR2H5ERq/DKYez2eyUD1WdlhwAQ4OSoCkF4S8JG7ME8KljL8m7bC2KaW3TLaeT+5HUYz7LNSacywdb4T52Vyiwwkywt0rYhH5LERkhV1eI6CL6h6MubZIam38b21Dq8UZVBCdKA8r44MQ==
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
X-Microsoft-Exchange-Diagnostics:
1;DM5PR16MB2149;9:4P+77kesJXddt3jqQ3xGFuBrIzzESdmrEbBLzdojG+voIG1orT6HF3yxbtP2HLwy7A8erFjOV4c287hh+euVIic+3UdCZNKpi8phfPOQzUExDre51NVGrE78/q+5xakBDsLP+MRh7Z6VDFxW85CjBUDZ00sleQ0qf6OeSVjRsBgdj62BN08CRvpT2uZlME5H
X-Microsoft-Antispam-Mailbox-Delivery:
ucf:0;jmr:0;ex:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(5062000261)(5061607266)(5061608174)(1007183)(4900095)(4920089)(6325004)(4923001);RF:JunkEmail;
X-Microsoft-Antispam-Message-Info:
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
X-Microsoft-Exchange-Diagnostics:
1;DM5PR16MB2149;27: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
X-Antivirus: avast! (VPS 180920-0, 9/20/2018), Inbound message
X-Antivirus-Status: Clean

Print Oil Change Coupons http://actualcurso.tech/djhd9fvntmbk6bccw8pp-x2sddsfwortmkwu26in6wcmc9fKcpxssefsneskhplklksjcdnjlksjcdnjgfde0cxcsawehplklksjfgdepcdgsawelmdfcdnjcdnjlksjprdfperfsjellmdferths2es5e1

http://actualcurso.tech/fucu3d27rsujzeq53va1-x2sddsfwortmkwu26in6wcmc9fKcpxssefsneskhplklksjcdnjlksjcdnjgfde0cxcsawehplklksjfgdepcdgsawelmdfcdnjcdnjlksjprdfperfsjellmdferths2es5e1

http://actualcurso.tech/jnwdu9z5vy80pyi680fl-x2sdsaweubbc16uak0u6hfssqeacpxssaweneskhplklksjcdnjlksjcdnjjefd0cxcdsfwhplklksjc9fKpcdgserwlmdfcdnjcdnjlksjprdfperfsjellmdfc9fKs2es5e1

http://actualcurso.tech/8yq3q90g8o3cg625ps0k-x2sdsefs2p995aegtmk2c09jefdcpxssefsneskhplklksjcdnjlksjcdnjc9fK0cxcserwhplklksjc9fKpcdgsawelmdfcdnjcdnjlksjprdfperfsjellmdfjefds2es5e1

http://actualcurso.tech/open.php?id_campaign=705353&id_list=18&id_user=13352861

Reply Report

Answer 9

jamesc40183ea7fa102f8bbb7c September 20, 2018

What a pain, same “high importance” as the other ones too, if it helps support at get.club were really helpful and took the .club domains away last time, just insta-banned them once I provided the evidence of spam and screenshots showing the URLs being used in the spam with the headers.

If you email the TLD support email address I gave and link them to this thread with the basic information they need I would imagine they’ll suspend those new domains the spammer is using. They were very helpful and did it really fast last time.

Reply Report

Answer 10

gqboyott September 21, 2018

These are all registered with Namecheap who refuses to shut down the domains even with every single message being provided to them. Suggesting i go to the hosting service instead (which of course I do - and they are being protected by Cloudflare which has done nothing about it either).

Reply Report

Answer 11

jamesc40183ea7fa102f8bbb7c September 22, 2018

The west thing to do is take to Twitter if these companies are ignoring abuse reports. I have noticed that spam abuse is just not taken seriously because there’s no money in it for the hosting providers, they do the bare minimum as there’s no regulation or threat of fines for not taking action. The only thing they risk of their IP reputation with other providers.

Posting on Digital Ocean, Cloudflare and others main Twitter account where it is more visible seems to get the best results because the more visible complaints people see in their feed, the more the perception is that they’re not a good provider or don’t take abuse and compromised accounts seriously.

Having said that Jarland from Digital Ocean was very helpful.

Reply Report

Related

Question

Why am I being constantly spammed by Digital Ocean and your abuse dpt are ignoring reports?

Leave a comment

Looking for something else?

Share

Share your Question

Related

Question

Why am I being constantly spammed by Digital Ocean and your abuse dpt are ignoring reports?

Leave a comment

Related

question

Does DigitalOcean preserve snapshots of deleted droplets?

question

Is there a DigitalOcean Free Trial Available?

question

Price difference for: (a) One droplet with multiple domains, and (b) multiple droplets, with the exact same combined usage between a & b

question

What is Cloud Hosting?

Looking for something else?

Almost there!