Here is a sample header that failed and one of the .ru's .
Code: Select all
DomainKey-Status: bad
Received: (qmail 9597 invoked by uid 10066); 25 Mar 2011 08:48:13 -0500
Received: from swxc23.calinoasal.com by gz.galacticzero.net (envelope-from <satellitetv@calinoasal.com>, uid 2020) with qmail-scanner-2.08st
(clamdscan: 0.97/12905. spamassassin: 3.2.5. perlscan: 2.08st.
Clear:RC:0(98.102.168.65):SA:1(3.9/3.5):.
Processed in 4.352913 secs); 25 Mar 2011 13:48:13 -0000
X-Spam-Status: Yes, hits=3.9 required=3.5
X-Spam-Level: +++
Received: from swxc23.calinoasal.com (98.102.168.65)
by gz.galacticzero.net with SMTP; 25 Mar 2011 08:48:08 -0500
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=default; d=calinoasal.com;
h=Message-ID:Date:Mime-Version:Subject:To:From:Content-Type:Content-Transfer-Encoding; i=satellitetv@calinoasal.com;
bh=7w1uYunl9czeFvzH/CG5cuX4B0M=;
b=dyLoGjj8qL4r2pMNF51D+8usUIusoAmckPRQwMe0d4mW5NyxVFKhOkJSkfYX0U3oWARtTcgyl7o1
rbkJvtM0tBiCx2D3DH5iB+qfotQMzRmN3A1jdBeJRvxugl+mS65LaQuHBC2e/4DIBdssDcohhQFn
hudsrGpoYSK1iwbelbE=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=default; d=calinoasal.com;
b=SRwD4NFek/rqTeaVxAHsNm9R8Vd4qoX6+l9t2pw5DH0nHB1WW1VC7lSETcMGn+1yUWrnBM1vXewy
S6JpH3t/4DdkxQM8SiHuuTsJX4SJI/5hqWKJiC1j24ppTA5gea+RhL5U42JBtKco+OPW6TFNznv1
Q5/Sxtvo5XQKnnxb7v4=;
Message-ID: <3560471378589704105117367@swxc23.calinoasal.com>
Date: Fri, 25 Mar 2011 09:10:21 -0400
Mime-Version: 1.0
Subject: ****SPAM**** LOW * Satellite TV has never been more fun, easy, and affordable- check it out
Russian:
DomainKey-Status: no signature
Received: (qmail 1784 invoked by uid 10066); 26 Mar 2011 18:19:37 -0500
Received: from 41.214.68.168 by gz.galacticzero.net (envelope-from <southeyrp1@mail3.dk.net.ru>, uid 2020) with qmail-scanner-2.08st
(clamdscan: 0.97/12911. spamassassin: 3.2.5. perlscan: 2.08st.
Clear:RC:0(41.214.68.168):SA:0(1.7/3.5):.
Processed in 3.887445 secs); 26 Mar 2011 23:19:37 -0000
X-Spam-Status: No, hits=1.7 required=3.5
X-Spam-Level: +
Received: from unknown (HELO MUPOTPUVQ) (41.214.68.168)
by gz.galacticzero.net with SMTP; 26 Mar 2011 18:19:32 -0500
Received: from 41.214.68.168 by mx2.mxmailer.com; Sat, 26 Mar 2011 22:48:46 +0000
Message-ID: <000d01cbec07$f70ece60$6400a8c0@southeyrp1>
From: =?koi8-r?B?IvDSz8TBzSDwz83F09TYxSI=?= <southeyrp1@mail3.dk.net.ru>
To: <REDACTED>
Subject: =?koi8-r?B?89LP3s7PLCDQ0s/EwcXU09Eg1cHT1M/LINDPxCDwz83F09TYxSDOwSDC?=
=?koi8-r?B?xdLFx9Ug0sXLyS4g68nF19PLz8Ug2y4=?=