SPAM de lestronchesdecake.fr via mailjet.com

En passant

Encore et toujours du SPAM : (petit rappel : https://signalants.signal-spam.fr )

Return-Path: <9816ccae.AL4AAARP-4MAAQvgfhwAAGVqvPkAAAAADesAAAAAAAhYRwBazYYZ@bnc3.mailjet.com>
...
X-Spam-Level: *
X-Spam-Status: No, score=1.8 required=5.0 tests=COUNTRY1,HTML_IMAGE_RATIO_02,
	HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_HELO_PASS,SPF_PASS autolearn=disabled
	version=3.4.0
X-Spam-Relay-Country: EU
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on spamd10
Received: from o29.p25.mailjet.com (o29.p25.mailjet.com [185.189.236.29])
	...
From: Trugluff <trugluff@lestronchesdecake.fr>
Reply-To: Trugluff <trugluff@lestronchesdecake.fr>
...
Subject:
 =?utf-8?Q?Copie_de_Otage,_=C3=B4_d=C3=A9sespoir_Arnaud_Beltrame_ce_h?=
 =?utf-8?Q?=C3=A9ros_de_Les_Tronches_de_Cake?=
Date: Wed, 11 Apr 2018 03:50:48 +0000
List-Unsubscribe: <mailto:unsub-9816ccae.i2hg.swg04l1moi2r@bnc3.mailjet.com>
X-CSA-Complaints: whitelist-complaints@eco.de
X-email_id: 61
X-MJ-Mid:
	AL4AAARP-4MAAQvgfhwAAGVqvPkAAAAADesAAAAAAAhYRwBazYYZ4WihmIxFRtGJ7j3eeCK62gAH7tA
X-MJ-SMTPGUID: e168a198-8c45-46d1-89ee-3dde7822bada
X-REPORT-ABUSE-TO: Message sent by Mailjet please report to
	abuse@mailjet.com with a copy of the message

Les noms de domaine dans cet email (à bloquer):

  • mailjet.com
  • lestronchesdecake.fr
  • mjt.lu

SPAM de mescomblesgratuits.fr via influence-shopping.com

Encore et toujours du SPAM :

Return-Path: <noreply@bounces.influence-shopping.com>
...
Received: from 10.0.0.153 by mx (envelope-from <noreply@bounces.influence-shopping.com>, uid 65534) with qmail-scanner-2.05st
...
Received: from manager.influence-shopping.fr (172.31.255.248) by mta.61.142.smtp.fr id hosgni199b4e
...
Subject: =?UTF-8?B?UHJvZml0ZXogZGUgc3VidmVudGlvbnMgcG91ciDDqWNvbm9taXNleiAzMCUgc3VyIHZvdHJlIGZhY3R1cmUgZOKAmcOpbmVyZ2ll?=
Message-ID: <87d2129efeca34a9c337c4a962151f4a@manager.influence-shopping.fr>
Date: Fri, 06 Apr 2018 09:16:11 +0200
From: "=?UTF-8?B?VHJhbnNpdGlvbiDDqW5lcmfDqXRpcXVl?=" <noreply@bounces.influence-shopping.com>
Reply-To: noreply@bounces.influence-shopping.com
MIME-Version: 1.0
X-Mailer-LID: 1
List-Unsubscribe: <http://manager.influence-shopping.fr/unsubscribe.php?M=911269&C=1e9e64ff928d6a9448bb1d4734640129&L=1&N=402>
X-Mailer: JRCG
X-Mailer-RecptId: 911269
X-Mailer-SID: 402
X-Mailer-Sent-By: 3
...

Liste des noms de domaines dans le SPAM (à blacklister) :

  • influence-shopping.fr .
  • influence-shopping.com .
  • mage.info.geoplc.com .
  • dk03all.com : Surement pour les statistiques …
  • geocourriel.fr : Surement pour les statistiques avec un pixel de 1×1 .

Donc en résumé, envoyer un email à  abuse@manager.influence-shopping.fr , abuse@geocourriel.fr (KO), abuse@dk03all.com (KO, mais hébergé chez kookai-mailing.com), abuse@geoplc.com, abuse@influence-shopping.com, contact@manager.influence-shopping.fr, contact@geoplc.com, contact@geocourriel.fr, contact@dk03all.com(KO), contact@mescomblesgratuits.fr, abuse@mescomblesgratuits.fr. « Merci de me supprimer de votre base de SPAM ».

SPAM de Giordano Vini via gmode.com.de

État

Encore et toujours du SPAM :

Return-Path: <bounce@gmode.com.de>
...
X-Spam-Flag: YES
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.4 required=5.0 tests=COUNTRY2,HTML_IMAGE_RATIO_02,
	HTML_MESSAGE,RCVD_IN_BRBL_LASTEXT,SPF_HELO_PASS,SPF_PASS autolearn=disabled
	version=3.4.0
X-Spam-Relay-Country: UA
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on spamd9.phpnet.org
X-Spam-Report: 
	*  3.0 COUNTRY2 No description available.
	* -0.0 SPF_HELO_PASS SPF: HELO matches SPF record
	* -0.0 SPF_PASS SPF: sender matches SPF record
	*  1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.
	*      [37.46.222.49 listed in bb.barracudacentral.org]
	*  0.0 HTML_MESSAGE BODY: HTML included in message
	*  0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area
....
Date: Wed, 28 Mar 2018 08:39:46 +0000
Subject: Les meilleurs vins italiens en ligne
From: Giordano Vini via Kartsoft <newsletter@gmode.com.de>
Reply-To: Giordano Vini via Kartsoft <newsletter@gmode.com.de>
....
X-Sender: bounce@gmode.com.de
X-Report-Abuse: Please report abuse for this campaign here:
 http://www.gmode.com.de/index.php/campaigns/tv1349gha19b5/report-abuse/sr0348gh0x4f8/xx539gny0e189
...
X-Bsos-Tracking-Did: 24
X-Bsos-Subscriber-Uid: xx539gny0e189
X-Bsos-Mailer: SwiftMailer - 5.4.x
X-Bsos-EBS: http://www.gmode.com.de/index.php/lists/block-address
X-Bsos-Delivery-Sid: 252
X-Bsos-Customer-Uid: vb481pq27fbe6
X-Bsos-Customer-Gid: 2
X-Bsos-Campaign-Uid: tv1349gha19b5
...

Les domaines dans le SPAM :

SPAM de plateforme-immobilier.fr via gmail.com

État

Les sites web présent dans le SPAM :

  • https://www.maison-grimaud.com/
  • https://youtu.be/
  • https://app.flashissue.com/
  • http://www.plateforme-immobilier.fr/
  • http://app.dslanding.com/
  • https://goo.gl/ : Pour la désinscription.
  • https://mailtrack.io/ : Sent with Mailtrack (logiciel de SPAM)
    • Tracking du SPAM
      • utm_source=3Dgmail
      • utm_medium=3Dsignature
      • utm_campaig=n=3Dsignaturevirality&