On Sunday 16 August 2020 12:21:09 Michael wrote:
> Hi All,
>
> I key my emails to who's suppose to be sending them (see above). I'm
> starting to get spam to the email I use for this list. Anyone else getting
> spam as well? Last one pasted below (with some snipping and HTML and other
> uniqueness removed).
>
> Note: cPanel's domain is cpanel.net, not .com.
>
> Last I knew our email addresses were not published in the list archives,
> did that change?
>
> Best,
> Michael
>
Yeah, that's why I tried hiding my email address. I forget now how it's
supposed to be done, but (when done correctly) email address show up as
username@xxxxxxxxxxx (or whatever).
I thought that I had done it right, but now I find that I just send out
duplicate emails to the list: one with my address hidden, substituting
@trinity.etc instead, and of course another, with my real email address
exposed. Whenever I fiddle round with the settings, I only seem to make
things worse.
In any case, I have managed to make myself seem uninteresting enough, or poor
enough, so that not even spammers or phishers care about me or my personal
information. Still, it would be nice not to send out duplicates emails to the
list. And if our email addresses are left hanging "out there", then it's only
a matter of time before we get spammed.
Bill
>
> Return-Path: <no-reply@xxxxxxxxxx>
> Delivered-To: {snip}; Sun, 16 Aug 2020 13:51:01 -0500
> Return-path: <no-reply@xxxxxxxxxx>
> Envelope-to: {snip}
> Delivery-date: Sun, 16 Aug 2020 13:51:01 -0500
> Received: from [103.133.104.222] (port=50389 helo=cpanel.com)
> by {snip} with esmtp (Exim 4.93)
> (envelope-from <no-reply@xxxxxxxxxx>)
> id 1k7NkA-0003on-Ii
> for {snip}; Sun, 16 Aug 2020 13:51:01 -0500
> From: cPanel <no-reply@xxxxxxxxxx>
> To: {snip}
> Date: 16 Aug 2020 11:50:22 -0700
> Message-ID: <{snip}@cpanel.com>
> MIME-Version: 1.0
> Content-Type: multipart/related;
> boundary="----=_NextPart_{snip}
> X-Spam-Status: Yes, score=33.4
> X-Spam-Score: 334
> X-Spam-Bar: +++++++++++++++++++++++++++++++++
> X-Spam-Report: Spam detection software, running on the system "{snip}",
> has identified this incoming email as possible spam. The original
> message has been attached to this so you can view it or label
> similar future email. If you have any questions, see
> root\@localhost for details.
> Content preview: Mailbox quota notification for “mail adminâ€. Dear
> User your email account is nearly full. The email account currently uses
> 96.38% (48.19 MB/50 MB) of its capacity.
> Content analysis details: (33.4 points, 5.0 required)
> pts rule name description
> ---- ----------------------
> -------------------------------------------------- 0.0 URIBL_BLOCKED
> ADMINISTRATOR NOTICE: The query to URIBL was blocked. See
>
> http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
> for more information.
> [URIs: 000webhostapp.com]
> 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
> bl.spamcop.net
> [Blocked - see
> <https://www.spamcop.net/bl.shtml?103.133.104.222>]
> 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
> https://senderscore.org/blacklistlookup/
> [103.133.104.222 listed in
> bl.score.senderscore.com]
> 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
> [103.133.104.222 listed in psbl.surriel.com]
> 6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
> [103.133.104.222 listed in bl.mailspike.net]
> 4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
> [SPF failed: Please see
> http://www.openspf.org/Why?s=helo;id=cpanel.com;ip=103.133.104.222;r={snip}
>] 4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
> [SPF failed: Please see
> http://www.openspf.org/Why?s=mfrom;id=no-reply%40cpanel.com;ip=103.133.104.
>222;r={snip}] 0.0 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text
> to image area
> 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
> 0.0 HTML_MESSAGE BODY: HTML included in message
> 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
> 2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
> [cf: 100]
> 2.0 RDNS_NONE Delivered to internal network by a host with
> no rDNS
> 0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
> 0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
> 1.0 TO_NO_BRKTS_HTML_IMG To: lacks brackets and HTML and one image
> 6.8 KAM_MAILBOX Mailbox Quota Phishing Scams
> X-Spam-Flag: YES
> Subject: ***SPAM*** [cPanel.com]WARNING: email account is nearly full.
> Status: R
> X-Status: NT
> X-KMail-EncryptionState:
> X-KMail-SignatureState:
> X-KMail-MDN-Sent:
>
> Note: This is an HTML message. For security reasons, only the raw HTML code
> is shown. If you trust the sender of this message then you can activate
> formatted HTML display for this message by clicking here.
>
>
> Mailbox quota notification for “mail admin”.
>
>
>
> Dear User your email account is nearly full.
>
> The email account currently uses 96.38% (48.19 MB/50 MB) of its capacity.
>
> You should remove some emails from the mailbox as soon as possible in order
> to prevent the loss of any future email. Use the Email Disk Usage tool at
>
> SYSTEM ADMINSTRATOR
>
> , or ask the system administrator to upgrade your account to a larger
> quota.
>
>
> The system generated this notice on Monday, August 14, 2020 at {snip} AM
> UTC.
>
> You can disable the “Quota::MailboxWarning” type of notification through
> the cPanel interface:
>
> DISABLE QUOTA
>
> Do not reply to this automated message.
>
>
>
> Copyright© 2020 cPanel, L.L.C.
>
>
>
> cp.png
>
---------------------------------------------------------------------
To unsubscribe, e-mail: trinity-users-unsubscribe@xxxxxxxxxxxxxxxxxxxxxxxxxx
For additional commands, e-mail: trinity-users-help@xxxxxxxxxxxxxxxxxxxxxxxxxx
Read list messages on the web archive: http://trinity-users.pearsoncomputing.net/
Please remember not to top-post: http://trinity.pearsoncomputing.net/mailing_lists/#top-posting
