hola / challenge_word_classifier

The challenge: tell English words apart from nonwords
170 stars 33 forks source link

Spam #6

Closed kAlvaro closed 8 years ago

kAlvaro commented 8 years ago

I've been referred here by an unrequested email message that does not provide a way to unsubscribe. Either someone's spamming in your name or you're doing it yourself. Please find redacted message header enclosed:

Delivered-To: redacted-email-address@gmail.com
Received: by 10.28.107.18 with SMTP id g18csp2017427wmc;
        Tue, 3 May 2016 22:30:28 -0700 (PDT)
X-Received: by 10.66.123.105 with SMTP id lz9mr9432808pab.37.1462339828350;
        Tue, 03 May 2016 22:30:28 -0700 (PDT)
Return-Path: <SRS0+4zYH=Q5=hola.org=challengejs@eforward1e.registrar-servers.com>
Received: from eforward1e.registrar-servers.com (eforward1e.registrar-servers.com. [69.160.33.89])
        by mx.google.com with ESMTPS id q9si2730982paz.202.2016.05.03.22.30.27
        for <redacted-email-address@gmail.com>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 03 May 2016 22:30:28 -0700 (PDT)
Received-SPF: pass (google.com: domain of SRS0+4zYH=Q5=hola.org=challengejs@eforward1e.registrar-servers.com designates 69.160.33.89 as permitted sender) client-ip=69.160.33.89;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@registrar-servers.com;
       spf=pass (google.com: domain of SRS0+4zYH=Q5=hola.org=challengejs@eforward1e.registrar-servers.com designates 69.160.33.89 as permitted sender) smtp.mailfrom=SRS0+4zYH=Q5=hola.org=challengejs@eforward1e.registrar-servers.com
Received: from eforward1d.registrar-servers.com (eforward1d.registrar-servers.com [69.160.33.88])
    by eforward1e.registrar-servers.com (Postfix) with ESMTP id 6D62D40989
    for <redacted-email-address@alvaro.es>; Wed,  4 May 2016 01:30:27 -0400 (EDT)
DKIM-Filter: OpenDKIM Filter v2.9.2 eforward1e.registrar-servers.com 6D62D40989
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
    d=registrar-servers.com; s=default; t=1462339827;
    bh=Y5VWyNdO1LQ1yydCIXbkEz6tVwE9BjusTLMjKulFosc=;
    h=From:To:Subject:Date;
    b=C/IgWUbq6aZAwBvkVqDToKBHdfzJ7hSn5gSlYWqSnEWKSUPBEM1dTfzKM3WuFOhwP
     SLelybFq2o5l3kxrkm0C7IuqurB86o4/foxI8zpCImw+A+SR3Z+4Q+QPbuXikft8xn
     D53pMNIJuoWAkEO+zxR8LDj7Hx0F0Cz/v2IpQ6mc=
Received: from mail.hola.org ([54.243.35.14])
    by eforward1d.registrar-servers.com with esmtp (Exim 4.85)
    (envelope-from <challengejs@hola.org>)
    id 1axpO4-0008FX-F5
    for redacted-email-address@alvaro.es; Tue, 03 May 2016 22:30:26 -0700
Received: from [10.71.1.141] (wall-ext.hola.org [212.235.66.73])
    (authenticated bits=0)
    by mail.hola.org (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id u445T3SW030907
    (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO)
    for <redacted-email-address@alvaro.es>; Wed, 4 May 2016 05:29:05 GMT
From: JS Sprint 2016 <challengejs@hola.org>
To: redacted-email-address@alvaro.es
Subject: Hola's JavaScript Spring 2016 Competition
Message-ID: <51c3e47a-3c36-87ef-6327-29ac1ef05f2e@hola.org>
Date: Wed, 4 May 2016 07:56:29 +0300
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101
 Thunderbird/45.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
X-jmail-Status: Pass, Flags=AUTH IP
Received-SPF: pass (eforward1d.registrar-servers.com: domain of hola.org designates 54.243.35.14 as permitted sender) client-ip=54.243.35.14; envelope-from=challengejs@hola.org; helo=mail.hola.org;
X-SPF-Result: eforward1d.registrar-servers.com: domain of hola.org designates 54.243.35.14 as permitted sender
X-Filter-ID: s0sct1PQhAABKnZB5plbIepxiHNhDLDLIa90nfu51/uPgUjSQqJ/jEbj4gcWX/+Ix5YB+7NnUQEm
 Uw8kSDgJq8vy2KNRKwz1RATuQuQemkAWwZdVLYmRW5pdAd1YKOfgrLk6G1wGHFw0enVLtROMpLhp
 dJhvpbPGW7RPt4VMGPyVLelwgzz9ty9ITeRAMLkyq+DL8PXiVKMi5gcUygMdBEYRr8xuIArcS9Cm
 y+KOqDA8F3IBcW531QN7uuZAONBpK1XJh8qGSSStom3WqfH5rGLAPdibaD40srdBXhgfLohb5wxw
 q6a5JGTNj4jSCHVbpXhkf8OCqjYAop7bBDSNJK94c0SA7E8KKgcSau1p8kR+pvlHhV6a5QjptwQB
 GybQAOMzhOTxQV3gyL1/3JYBTWYzx2Zgyhf3OXiddZgacWd9zpaYOSGtz93RY9hAkX4mO0ipBEEv
 5hB6pM36CGGXaYPAgTtUp75uqlx0KezvZHVCYRb829j8haUfxTqS+RN5bIE4IPBEuGByelw7CsYr
 Zsbs+W7ZZnDanUanwir9pdDB/3geoUtfmxZzuU8SZcviECYik2GDmrMTou+82ME14A==
X-Report-Abuse-To: spam@se3.registrar-servers.com
Authentication-Results: registrar-servers.com; spf=pass smtp.mailfrom=challengejs@hola.org
X-SpamExperts-Class: unsure
X-SpamExperts-Evidence: Combined (0.64)
X-Recommended-Action: accept
The-Compiler commented 8 years ago

I suggest you report this to Amazon AWS by forwarding the full mail to abuse@amazonaws.com:

NetRange:       54.240.0.0 - 54.255.255.255
CIDR:           54.240.0.0/12
NetName:        AMAZON-2011L
NetHandle:      NET-54-240-0-0-1
Parent:         NET54 (NET-54-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       AS16509
Organization:   Amazon Technologies Inc. (AT-88-Z)
RegDate:        2011-12-09
Updated:        2012-04-02
Ref:            https://whois.arin.net/rest/net/NET-54-240-0-0-1

OrgName:        Amazon Technologies Inc.
OrgId:          AT-88-Z
Address:        410 Terry Ave N.
City:           Seattle
StateProv:      WA
PostalCode:     98109
Country:        US
RegDate:        2011-12-08
Updated:        2014-10-20
Comment:        All abuse reports MUST include:
Comment:        * src IP
Comment:        * dest IP (your IP)
Comment:        * dest port
Comment:        * Accurate date/timestamp and timezone of activity
Comment:        * Intensity/frequency (short log extracts)
Comment:        * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref:            https://whois.arin.net/rest/org/AT-88-Z

OrgAbuseHandle: AEA8-ARIN
OrgAbuseName:   Amazon EC2 Abuse
OrgAbusePhone:  +1-206-266-4064 
OrgAbuseEmail:  abuse@amazonaws.com
OrgAbuseRef:    https://whois.arin.net/rest/poc/AEA8-ARIN
The-Compiler commented 8 years ago

And while you're at it, reporting @hola at https://github.com/contact?report=hola might not be a bad idea either, I figure GitHub might also want to know about a repo being advertised via spam

rieder91 commented 8 years ago

I'd also appreciate a way to unsubscribe from this ChallengeJS newsletter (which I didn't even sign up for). This is probably a better solution than for me to send an abuse report.

xderry commented 8 years ago

Hi kAlvaro and rieder91,

My name is Derry Shribman, CTO and co-founder of Hola.

I apologize for this matter. It was brought to our attention last week. We checked it out and found that our HR team, naively, sent such emails. They stopped immediately last week, and I've now also removed you both from our list. We've also added an 'unsubscribe' to all outgoing emails of this type that we send.

If you still see any further problems on your side, please contact me directly for immediate resolution.

Thanks! Derry

Derry Shribman | CTO, Hola! | +972-54-2271300 | Skype: xxderry