SPAM from gmail.com

BiteMyElbow

Member
Jul 5, 2021
40
0
11
39
Good afternoon.

Can you please tell me how to solve the problem?

We started receiving SPAM emails from GMAIL, see the examples below.
Of course, I can't block GMAIL by IP. Adding the sender to the BLACKLIST also does not seem to be effective. How do I set up PMG to filter similar emails?

Received: from MAIL05.innerdomain (172.30.21.129) by MAIL05.innerdomain
(172.30.21.129) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.4 via Mailbox
Transport; Tue, 15 Apr 2025 13:41:26 +0300
Received: from MAIL05.innerdomain (172.30.21.129) by MAIL05.innerdomain
(172.30.21.129) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.4; Tue, 15 Apr
2025 13:41:25 +0300
Received: from smtp40.outerdomain (172.30.21.120) by MAIL05.innerdomain
(172.30.21.129) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.4 via Frontend
Transport; Tue, 15 Apr 2025 13:41:25 +0300
Received: from EDGE02.innerdomain (localhost.localdomain [127.0.0.1])
by EDGE02.innerdomain (Proxmox) with ESMTP id AB05816152F;
Tue, 15 Apr 2025 13:41:25 +0300 (MSK)
Received: from mail-pl1-f177.google.com (mail-pl1-f177.google.com [209.85.214.177])
by EDGE02.innerdomain (Proxmox) with ESMTPS id 44B7116116B;
Tue, 15 Apr 2025 13:41:19 +0300 (MSK)
Received: by mail-pl1-f177.google.com with SMTP id d9443c01a7336-22409077c06so70076385ad.1;
Tue, 15 Apr 2025 03:41:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1744713677; x=1745318477; darn=outerdomain;
h=mime-version:disposition-notification-to:subject:message-id:from
:date:from:to:cc:subject:date:message-id:reply-to;
bh=IUTCS05e7xhOeuGpp0DwawogS+Ig1YXcUxCmzyaqsSE=;
b=WccNHD0DQBcW3DRUvQBX2ZbX948evSkUiqZVQRoUaBRKrIctCAyGrEld3HiN7OAkxo
pVRk+nI24mMOLAZDp6HeMHQk1qSKdqYUkADA+TxsKJVBSZMTfMV0MHfeIEhjUZ+nKcyV
j4U8pooqQA2xHvDuAoiMr38xP0zD1InfED67AMiiOSvw07CzceOExcnkpQTjyxnjJEUN
fPJGzOpqlsy++ZXtPR7nIwZithO3yK4rvfr+coJ/igKnWqbBsyHrmfuKPmKJQZovp6oo
kFtp42+z8w+Gn0/rfiR/oSr7eiJcSDLn3ZT47S/eh6zxDIrklW+RDpuCxLBnNPrhvSbR
jjhg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1744713677; x=1745318477;
h=mime-version:disposition-notification-to:subject:message-id:from
:date:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=IUTCS05e7xhOeuGpp0DwawogS+Ig1YXcUxCmzyaqsSE=;
b=RaUgYHKHTVc41r+2KnlcgNVC3pImgOkBiNXEQh0cwbd8ZE62jixvQUnyMIdOboCbFM
WbiddMtCuBc2218gZYOtg7Zq/671yZBeUr2VykGLF/+xD9Fe7HxgkBIg96kH3+riJFQm
GeuV7TXJKCbobjcnmmnShRFPZunDH6GbDQ1Kds6kflu2UZ3GX8oRCryiplgopcY/Ww3B
PV2gyj+C0M2shNVAwOBcQQN277wLOLyCQlzT1C01do1lOfqNT0AvbmXfkj8o2vjkM/1W
JSQFA/YMEIKpI8Tk1QUvKNuaUWug+sdMJuG7zPqVFaSexGux5wvupd3VBoZMGswD+upU
RmyA==
X-Forwarded-Encrypted: i=1; AJvYcCU+6rPw8DtgZjjJw/rrGLbLnUmu6TSAc1VWHfkzFnmIb3e0S8JbgTs/jImwkUJGPnmykdLQcQPufjM=@outerdomain, AJvYcCW7BpNWtkmCLQvbOQudFEinCmibZfQhHSHyz0BwjMBJ4d9/QeXhNPtdFaDYueP/IlsLBFn9@outerdomain
X-Gm-Message-State: AOJu0YwaSueKLYXVdcJcjHmfuoOTw5n24JcVz3ja9kYiWhSKN4it3Hdf
CsEQi7qs3Cy/+Ru3OIlLU2QC0upaZPNE6aw2fD9l4KZZyiQhtV6B
X-Gm-Gg: ASbGncvrMlBmADNGlDpEguGKLCj8mb2gFvQiRY7NmVSAdKCJBKAPKFfoKUDY4RtRTOq
pGRNxwOV9ZN2nUElFUY94OwSvhhTTNmcyI+YPCLHwUU281stiesZgZ914L75+87TZH9EvqbQqXJ
VGbuIxwJi5Sc2fxfv+aI7FI3f2cxqg0BWxmmtmSYfDM1Dgp8d2RdKX6ao9s5ynh8EE8AFnAw7Vw
wtYvoAX4oglr3X1he08BwtN6gNbw17GF66o49b3VsqRKGR06oDUFgcwJlAMd6iNQvzzGNc4evpP
wmBndI8A1fwTuWdKSWQfvw2bsSz/bdJcdMhr+Buvr0H+tCSnpYn70KcoV+3NEctP39JzIgQPTvo
u/LCGKK+60zJP1A==
X-Google-Smtp-Source: AGHT+IHMziT7aHZeBg/SWXJUfVFh5E5DXW/OYmCJo88EpsHGdCNFmJR4PGMLaEqZlv+WENNI1Kj5Rw==
X-Received: by 2002:a17:902:9885:b0:224:24d5:f20a with SMTP id d9443c01a7336-22bea4fe132mr186189605ad.48.1744713676677;
Tue, 15 Apr 2025 03:41:16 -0700 (PDT)
Received: from CHINAMI-6T5SRGC ([103.223.122.190])
by smtp.gmail.com with ESMTPSA id d9443c01a7336-22ac7c93addsm113735605ad.152.2025.04.15.03.41.06
(version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256);
Tue, 15 Apr 2025 03:41:16 -0700 (PDT)
Date: Tue, 15 Apr 2025 18:41:04 +0800
From: kishashaw111 <kishashaw111@gmail.com>
Message-ID: <5C25327A-4118-40B9-8BAA-FD69AF2C66DB@gmail.com>
Subject: Truck prices 2025/4/14-2025/4/20
Disposition-Notification-To: kishashaw111<kishashaw111@gmail.com>
X-Mailer: MailMasterPC/5.2.2.1009 (10.0.19045)
X-MailMaster-ShowOneRcpt: 1
X-CUSTOM-MAIL-MASTER-SENT-ID: FA634A72-1EFC-4721-9F73-06C203B159C7
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=_mailmaster-67fe37c0_0_18be_="
X-SPAM-LEVEL: Spam detection results: 2
DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid
DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature
DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain
DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain
FREEMAIL_ENVFROM_END_DIGIT 0.25 Envelope-from freemail username ends in digit
FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider
GB_FREEMAIL_DISPTO 0.001 Disposition-Notification-To/From or Disposition-Notification-To/body contain different freemails
GB_FREEMAIL_NUM 1 Freemail spammy address
HTML_MESSAGE 0.001 HTML included in message
KAM_NUMSUBJECT 0.5 Subject ends in numbers excluding current years
MALFORMED_FREEMAIL 0.1 Bad headers on message from free email service
MISSING_HEADERS 1.207 Missing To: header
RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust
RCVD_IN_MSPIKE_H3 0.001 Good reputation (+3)
RCVD_IN_MSPIKE_WL 0.001 Mailspike good senders
SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record
SPF_PASS -0.001 SPF: sender matches SPF record
T_KAM_HTML_FONT_INVALID 0.01 Test for Invalidly Named or Formatted Colors in HTML
To: Undisclosed recipients:;
Return-Path: kishashaw111@gmail.com
X-MS-Exchange-Organization-Network-Message-Id: a452b79d-c17c-42f8-3ca2-08dd7c0a127a
X-MS-Exchange-Organization-AVStamp-Enterprise: 1.0
X-MS-Exchange-Organization-AuthSource: MAIL05.innerdomain
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Transport-EndToEndLatency: 00:00:00.2770362
X-MS-Exchange-Processed-By-BccFoldering: 15.02.1544.004

Received: from MAIL05.innerdomain (172.30.21.129) by MAIL05.innerdomain
(172.30.21.129) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.4 via Mailbox
Transport; Tue, 15 Apr 2025 11:06:30 +0300
Received: from MAIL05.innerdomain (172.30.21.129) by MAIL05.innerdomain
(172.30.21.129) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.4; Tue, 15 Apr
2025 11:06:30 +0300
Received: from smtp40.outerdomain (172.30.21.120) by MAIL05.innerdomain
(172.30.21.129) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.4 via Frontend
Transport; Tue, 15 Apr 2025 11:06:30 +0300
Received: from EDGE02.innerdomain (localhost.localdomain [127.0.0.1])
by EDGE02.innerdomain (Proxmox) with ESMTP id 0ABE216151A
for <info@outerdomain>; Tue, 15 Apr 2025 11:06:30 +0300 (MSK)
Received: from mail-pg1-f194.google.com (mail-pg1-f194.google.com [209.85.215.194])
by EDGE02.innerdomain (Proxmox) with ESMTPS id 3A0F9161529
for <info@outerdomain>; Tue, 15 Apr 2025 11:06:25 +0300 (MSK)
Received: by mail-pg1-f194.google.com with SMTP id 41be03b00d2f7-7fd581c2bf4so4512194a12.3
for <info@outerdomain>; Tue, 15 Apr 2025 01:06:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1744704382; x=1745309182; darn=outerdomain;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=6wyo+fICMq8Af2sYxsPP5l5PTtxsWkBvl8gal+QwW7E=;
b=O6JAl+TOD1qPC9iQgqxN8/xZOJDuoQ5SElhJeHL61JIpxTFGPY6fFeTYeM24QSP/54
yOqH+8nY5AuoDywPIaRdjIf6+hct4Q5kojlMRZ11YPxNdNmUEPVXbdqNJZ3GvbahFE1G
VMFpbv+nDW8rwo+eJkENR2almtKs5CgM/4DBvK5u/IFi4hfZNNHpTXYYbx3EFf9EO2Ug
0lCPvbtkEO+e0oYjIdnVmsYi/D/tGsAr0Se4UZG7vuzwwU1MnavbZ8SY1HaSmx5BLKm8
xXtR2K3n+/I2bGnZ1o57Dh5J3gXtk318wUPoYhUgF3xN/buw6KUO47EETmXfzqopWrVq
uv7Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1744704382; x=1745309182;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=6wyo+fICMq8Af2sYxsPP5l5PTtxsWkBvl8gal+QwW7E=;
b=qLwEm8sF4xouwLLmgf4HYR0A4csSSlHrGgRJdfRH/PN8UXF8g5go5lK5iNEyFNuFxM
nWRWX65bg5LqseVx1n8IQZm8PsCT6FMVVm0nFRP0IGQWP6B7gU2OUPz+nlsv4nxW4QKp
S0yf0/6LfTtL1H09zdRk7szwuGJ0zmHiIVlJjMTM8e1QPrk7EYCsxIM1153j/87lMSLv
P62DNclC6cSBb6Lqm1UFyyP32RN5pAgm8nbYkKcA/k5rBsSXVISWeVQ1h/lgvPMga0EW
Eynd+2YrAGQd3wOr6uNT56v6S759oZoFpXllsmzv1XiLgdjC/uxdygFdAEevmqQ5xb1w
3VHw==
X-Forwarded-Encrypted: i=1; AJvYcCV8UoeC1W0MjO6BTlzGq/xVrq/dwxwuc+TNBpZuWTI8XqAndQybbQl6+OzF4KE9NxBgulvV@outerdomain
X-Gm-Message-State: AOJu0Yw0uMfIhJzdYL3wTDSnV+uWMZ6LvpTsSVXsl9pj5MZgdaVdo6Rc
YO9ZbY8+DzydbjTLLF7JdYZ9ZeFC8v0T6YWyKNqHxfEQyLz1XjSnvbhmjwKgvh+BwwTBFORkxkp
ZM/Ur6zoPHDx4hRu/sdY1INv6PM0=
X-Gm-Gg: ASbGncvYumykfZM9ettl/NdXvoSnAGj+IwFY2XVBjSE7lBYdSOzj6bQ2uijgm58aIXN
J0IQ/CA0cmKW7J1D6PjjNe2jGrNE7GhsXiZS0C2Jx87FX7wrcF9Yf/yDE1qZmDJbtQRmw7lqK6z
es3RB9Mpjt3Mz/1NIUIcN91vJb6ulO/csjAA==
X-Google-Smtp-Source: AGHT+IFS7ki9JX1yTQXxksgp+ZG7nKz31wOgM5oGpH6r0oRa6Xs14EzxrOPaHECYplzVR0QyA+HdPJd5JRIbuML2BXI=
X-Received: by 2002:a17:90b:582b:b0:308:5273:4dee with SMTP id
98e67ed59e1d1-30852734e83mr2191884a91.15.1744704381789; Tue, 15 Apr 2025
01:06:21 -0700 (PDT)
MIME-Version: 1.0
From: Adrain Zhou <sadigablikazun@gmail.com>
Date: Tue, 15 Apr 2025 16:06:10 +0800
X-Gm-Features: ATxdqUFj-aodqH6HFUyLvwtuFnpUB4xi-13Zq07O0VN_lXurc-0ioMgTLn0Ukw8
Message-ID: <CAKDBgYC1oYJ2dwJze2qkv0dkt0W8j8_WG-FkCyd+oWbfZix4sw@mail.gmail.com>
Subject: Please check our rail freight from China to Russia/Belarus
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000ea311b0632cca48e"
X-SPAM-LEVEL: Spam detection results: 0
AWL 0.002 Adjusted score from AWL reputation of From: address
DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid
DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature
DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain
DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain
FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider
HTML_FONT_LOW_CONTRAST 0.001 HTML font color similar or identical to background
HTML_MESSAGE 0.001 HTML included in message
KAM_SHORT 0.001 Use of a URL Shortener for very short URL
POISEN_SPAM_PILL 0.1 Meta: its spam
POISEN_SPAM_PILL_1 0.1 random spam to be learned in bayes
POISEN_SPAM_PILL_3 0.1 random spam to be learned in bayes
RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust
RCVD_IN_MSPIKE_H3 0.001 Good reputation (+3)
RCVD_IN_MSPIKE_WL 0.001 Mailspike good senders
SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record
SPF_PASS -0.001 SPF: sender matches SPF record
T_REMOTE_IMAGE 0.01 Message contains an external image
Return-Path: sadigablikazun@gmail.com
X-MS-Exchange-Organization-Network-Message-Id: d44966a8-4a87-470f-a647-08dd7bf46dd1
X-MS-Exchange-Organization-AVStamp-Enterprise: 1.0
X-MS-Exchange-Organization-AuthSource: MAIL05.innerdomain
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Transport-EndToEndLatency: 00:00:00.2120221
X-MS-Exchange-Processed-By-BccFoldering: 15.02.1544.004
 
Received: from MAIL05.innerdomain (172.30.21.129) by MAIL05.innerdomain
(172.30.21.129) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.4 via Mailbox
Transport; Tue, 15 Apr 2025 10:39:32 +0300
Received: from MAIL05.innerdomain (172.30.21.129) by MAIL05.innerdomain
(172.30.21.129) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.4; Tue, 15 Apr
2025 10:39:32 +0300
Received: from smtp40.outerdomain (172.30.21.120) by MAIL05.innerdomain
(172.30.21.129) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.4 via Frontend
Transport; Tue, 15 Apr 2025 10:39:32 +0300
Received: from EDGE02.innerdomain (localhost.localdomain [127.0.0.1])
by EDGE02.innerdomain (Proxmox) with ESMTP id 3D45116151A
for <info@outerdomain>; Tue, 15 Apr 2025 10:39:32 +0300 (MSK)
Received: from mail-ed1-f53.google.com (mail-ed1-f53.google.com [209.85.208.53])
by EDGE02.innerdomain (Proxmox) with ESMTPS id CBF06161515
for <info@outerdomain>; Tue, 15 Apr 2025 10:39:27 +0300 (MSK)
Received: by mail-ed1-f53.google.com with SMTP id 4fb4d7f45d1cf-5e5e22e6ed2so8886562a12.3
for <info@outerdomain>; Tue, 15 Apr 2025 00:39:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1744702766; x=1745307566; darn=outerdomain;
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
:from:to:cc:subject:date:message-id:reply-to;
bh=sTo9RwBZCZ8sLSnXbPbAyY0BN1pFm1ay/XoGW0+MrQ8=;
b=UteXP7rm6aTwddRK8cOaY9UN9pml4wetrCDBpe4NOVo9VFiALSiODC4O9BEPvZ4jKh
6+y+bZCwLmuZbwAyMG7HufoKEWKlkOUE5mo05cy/6pfhXYZHvwU1h0d7+CYFOhSUGGV1
FqaymRFCrQHdPsi0zwhXN+/xpu45kQKiXlANzG53OUkMNDdbG33xtURAuq4glL1FvwmG
qSnMkFR4+v+higR0dLWb1VPyKwQIL/DsnirU2WVfcCg3f8dW+JL0sY5Bcbx8fw/mAEyy
hA0ErZzd9w+7mf+7KtMKy/dcui+Wzc/5y6/VHiV2v34dtbBb/Fg+yCsqRZ009efg2DoY
3wng==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1744702766; x=1745307566;
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=sTo9RwBZCZ8sLSnXbPbAyY0BN1pFm1ay/XoGW0+MrQ8=;
b=LqGU9HwO+KYzp41Z/bUeEmj1fTazAgb7q1QA1yssLA8o0h9sN2rAgltPpzNPGPH+Df
D16D/kPLx9ce5ej0FmzWKQAr+qo2JyzjNZuabmPv2LBpPJrOCHPuNJCgvyCEwMB2g6ZE
n8GY7ifFAOisotzSTurkmpiLBAmbd1ZeqTzSrx+9hgjgWE28G7RsccjKbfX0h4k6uw9Q
Egc+A7b3v7nKQqYbfKA4fPsfB/ZVGWapzdyJXSmTFJE4lqnWnwu8WWGtkjjmbcWVCj7j
EjsVVbdiySCC4kF55MZeAComml/l8YWDNNM2OyD6gjQuxnXHmIeIHobBLBf9LnJA6kqb
gPjA==
X-Gm-Message-State: AOJu0YzM+m1uJlHnvIqAonooGFXjxtKhBqhsyielxyrJ8CGd4A3A1Igz
RS0+y30iz0tZlo+rx5Cak+5BDYUarYt7rwbONx28isWPZlpRl5zkBbDCiVtFqzLgG9LRhf5ytkk
FyemR3EQ8hSlHXSIHcvVaUk0NtGb4GNa2
X-Gm-Gg: ASbGncuqFeJQRfKOBaNLx3/U3THWWmCzbavNyCIv3Vg5FobHxXl2k6qiR3o569MvhPv
0z7MIjFWSo/XXJKOnSeV27XCFTnuurI2DnulshFtbrBpbihuEvJgB6T3sriFBkaWAcXa3bX7A4p
wyNQj9TeZF9AKynafZ/9wcHA==
X-Google-Smtp-Source: AGHT+IHf/b66/vaeaR3bx54SnBWEfjiovacxx4qprGqYYmfqDtEd1fnfZWXXHfRSikHm8z9eawzorCWdBjrqE7mdtYw=
X-Received: by 2002:a05:6402:1ecc:b0:5e4:99af:b7c with SMTP id
4fb4d7f45d1cf-5f36f644fa1mr10884302a12.9.1744702766031; Tue, 15 Apr 2025
00:39:26 -0700 (PDT)
MIME-Version: 1.0
References: <CAP=_0R8imffOO-y-o+Zi2C_P7WUS-OFDJD9uPWSYrQbbjE_+zQ@mail.gmail.com>
<CAP=_0R9s-ZJmetCqtcrZJW5XFFYJB--y=XrrDXNhWwmh3=2eFw@mail.gmail.com>
<CAP=_0R-uxA+oX+0sSFjCmPtcqY-zZLJxO8_gkK9NnCk65-PeCA@mail.gmail.com>
<CAP=_0R9auOTc4A8sSzptQhq1DfmFNL5f+J8yzzbNeJvJa2Jp2A@mail.gmail.com>
<CAP=_0R9HCcmjPcgzB2bkzwKk+seAgu7hwpz-jvmV_XG=5T4_1A@mail.gmail.com>
<CAP=_0R8aKyWWRM+uLTbv051ZAWzsZcfvgTkCvqkOuqMXceKGqw@mail.gmail.com>
<CAP=_0R-_57566o24mjqKt7DfEHnRwCB6C7xrSnv=QCDmF+sT0w@mail.gmail.com>
<CAP=_0R96UuoT4yCeKky9n+Bv=0KKDLTdzFgbRedKcoSzy6wa2w@mail.gmail.com>
<CAP=_0R8=-DOmxKoPL7JutePtJOzX=gOF91=ht23ZnJ8-ZWKmNw@mail.gmail.com>
<CAP=_0R_mmoboyCGZnVVEn1H=HSHnpoW8Qi5T0TSyw=-rFM4N6Q@mail.gmail.com>
<CAP=_0R83OdTLJZ1DTAW3jpvUsi-TYT+9dBjq9uBXbPGOkLSp1g@mail.gmail.com>
<CAP=_0R90qSTm0z8g60NCrCERcM_qVV3cGcqzsNUWyFH3iBdfcw@mail.gmail.com>
<CAP=_0R_1KYz5EMt_HjcYADE0BekyhW+TajSfzsj7fu+Orx09Bg@mail.gmail.com>
<CAP=_0R__cbydeAFuU2NhXvHYViX31gPYKnF=C9FT-goreF_8sg@mail.gmail.com>
<CAP=_0R_rVWcHxDJ1+f+i+L8yjjevoO=OQj5QWzHDnnn+-LxyKg@mail.gmail.com>
<CAP=_0R_kxAUBoGS-JbkgzHbLcZaek0JAWHBvx+TQNnF4AbM85g@mail.gmail.com>
<CAP=_0R8MtQvxGo8YghoEOC_SY2m-JLY7=dqYT-EM01Ma+cW+1g@mail.gmail.com>
<CAP=_0R8euvXHDUr6g+ig09wCjaHamebDrq3eS6VsN1+STRcpJg@mail.gmail.com>
<CAP=_0R9Z-pnNHYHr+oikiyXVu1QFPYDgWG_HG3jq+DXmix39-g@mail.gmail.com>
<CAP=_0R9N8L+D1BgiLu4qGTtryeov3QnW8-COacP7UZ4w4pOrOg@mail.gmail.com>
<CAP=_0R9MJs2d-F2_fbU4oTa2g4h=FpPWaRN7ptokpr=P-supJw@mail.gmail.com>
<CAP=_0R8F6Kntc=C=OhQRMAtHujtbRfhtGRctMBfvkcK4o7qA0A@mail.gmail.com>
<CAP=_0R_LgpydUrFFx6nRyzV0RPrE644C-3PE7dvppFLw1AW_ig@mail.gmail.com>
<CAP=_0R-0JbVMk5MBvH51dpTJFTcJ=4p2R4CjWyTvkaC_kAMN5w@mail.gmail.com>
<CAP=_0R_5k=iRtEks3ZU36RuSCODBv2=B8pnSNcu5tewbpqnWEQ@mail.gmail.com>
<CAP=_0R-O2pb8Bk-6o2pv2U67Jwwqhhd0wmq40or7+B1=UVpPqQ@mail.gmail.com>
<CAP=_0R-bEnj8=fXY71S20AtEc2rEHdW9xFDiBr4mJCWtygWcKA@mail.gmail.com>
<CAP=_0R_xUB9dN4L4nC4BVdahvg-ZMtSVbesuJpO2W68kvDAyEA@mail.gmail.com>
<CAP=_0R95+97tiCFYFuNUcKtLSYvGs5-QCK5nQ78Q8UgiptYN-w@mail.gmail.com>
<CAP=_0R89mkoqgtBDVBMVrY-Lhak9jmYV1c-=T2GMDgXH0rM3gg@mail.gmail.com>
<CAP=_0R-LXdQA9_v4bTD_KfhSU4m-Q6vWbY-+-ZH35zT_R827Gg@mail.gmail.com>
<CAP=_0R90YqpBbguq2ymr2Dy34GUS8Z-AdC7=UdmvMVuWg_3KYQ@mail.gmail.com>
<CAP=_0R9oFyshiG4v4JTb=wYETTXbjgij6_F_9BmdxY-z0p_tfA@mail.gmail.com>
<CAP=_0R8RS_F5HYzgLW+no7YQVEhY=UDn1yGzP-mpK7CYMqWYDw@mail.gmail.com>
<CAP=_0R8WAxR=088rYG4D8ARCzGDJ4=W5SpwY8WrgVMB8ejb1RQ@mail.gmail.com>
<CAP=_0R-A-LxTg4ehPEN==Y82jcdetS4Sh6iT4oP0KET_HZ31mA@mail.gmail.com>
<CAP=_0R9s23F0PvWPA3stkH2DwH=9u9_b02FV8HFnZ_jQ0+SZtA@mail.gmail.com>
<CAP=_0R9oE6bUrkVgNMwFwc8DFZ2-Jt9A8=RupMJ9nKAcnZj=XQ@mail.gmail.com>
<CAP=_0R9f4k0Qa6bP95sTubVBp4-0QyuS+z2Vk6ojaUiRhiqf5A@mail.gmail.com>
<CAP=_0R_EtYT0n=W-8YfMEhXgtP8ErtByVoze61umTqm4YrzTOA@mail.gmail.com>
<CAP=_0R8uBGDbiz8UmB3wwjHMw=Gjb-Ox677V9X8OD6=c16isTw@mail.gmail.com> <CAP=_0R8Wdm0Wi=MpdMz5ptB4ctWGBJ=QJoaVZS9KPrAzhpaznA@mail.gmail.com>
In-Reply-To: <CAP=_0R8Wdm0Wi=MpdMz5ptB4ctWGBJ=QJoaVZS9KPrAzhpaznA@mail.gmail.com>
From: Alex Rao <alexrao528@gmail.com>
Date: Tue, 15 Apr 2025 15:39:15 +0800
X-Gm-Features: ATxdqUGkhw9ezOavV55nTH2S2bh2GZMP6jg7UMPQZmmpkJHvHYhXsmWEI6RoCqU
Message-ID: <CAP=_0R-=iGJ5c_ZLr+WtJ2hVY+TeRWbvNeNFNAAbyUof0pYbmw@mail.gmail.com>
Subject: Fwd: Sea and road freight from China to Europe/Russia and along the route
To: info@outerdomain
Content-Type: multipart/alternative; boundary="0000000000009bae240632cc4412"
X-SPAM-LEVEL: Spam detection results: 2
DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid
DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature
DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain
DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain
FREEMAIL_ENVFROM_END_DIGIT 0.25 Envelope-from freemail username ends in digit
FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider
FREEMAIL_REPLY 1 From and body contain different freemails
GB_FREEMAIL_NUM 1 Freemail spammy address
HTML_MESSAGE 0.001 HTML included in message
RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust
RCVD_IN_MSPIKE_H2 0.001 Average reputation (+2)
SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record
SPF_PASS -0.001 SPF: sender matches SPF record
Return-Path: alexrao528@gmail.com
X-MS-Exchange-Organization-Network-Message-Id: d9d5befa-192d-4d5c-27d8-08dd7bf0a989
X-MS-Exchange-Organization-AVStamp-Enterprise: 1.0
X-MS-Exchange-Organization-AuthSource: MAIL05.innerdomain
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Transport-EndToEndLatency: 00:00:00.2440854
X-MS-Exchange-Processed-By-BccFoldering: 15.02.1544.004

The mail itself does not even have To: address:

Thank you in advance.
 

Attachments

  • 1744720921845.png
    1744720921845.png
    67.6 KB · Views: 5
You probably cannot do much apart from content-based spam filtering. Gmail allows to create accounts by the dozen and has been a spam source of a premier kind for a long time. The spam originates from their servers, so SPF or DKIM do not help.