This spammer consistently gets their spam through MIAB. How can I stop it please?
Return-Path: hj+bncBCN6DCERQIDRB556VO7QMGQEBCXGMCA@hcv.hodaiweb.com
Delivered-To: ces@ecovillage.cc
Received: from box.ecovillage.cc ([127.0.0.1])
by box.ecovillage.cc with LMTP
id QPHWFRHh6mdh9xAAMoO61A
(envelope-from hj+bncBCN6DCERQIDRB556VO7QMGQEBCXGMCA@hcv.hodaiweb.com)
for ces@ecovillage.cc; Mon, 31 Mar 2025 11:38:09 -0700
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on box.ecovillage.cc
X-Spam-Level:
X-Spam-Status: No, score=-1.6 required=10.0 tests=BAYES_00,DKIM_SIGNED,
DKIM_VALID,DKIM_VALID_AU,DMARC_NONE,HTML_IMAGE_ONLY_28,HTML_MESSAGE,
MAILING_LIST_MULTI,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,
SPF_PASS autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Report:
* -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
* [score: 0.0000]
* 0.1 DMARC_NONE DMARC record not found
* -0.1 SPF_PASS SPF check passed
* 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record
* 1.4 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of
* words
* 0.0 HTML_MESSAGE BODY: HTML included in message
* -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
* -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
* author’s domain
* 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
* valid
* 0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
* [209.85.219.70 listed in wl.mailspike.net]
* -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at
* https://www.dnswl.org/, no trust
* [209.85.219.70 listed in list.dnswl.org]
* -1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list
* manager
X-Spam-Score: -1.6
Authentication-Results: box.ecovillage.cc; dmarc=none (p=none dis=none) header.from=hcv.hodaiweb.com
Authentication-Results: box.ecovillage.cc; spf=pass smtp.mailfrom=hcv.hodaiweb.com
Authentication-Results: box.ecovillage.cc;
dkim=pass (1024-bit key; unprotected) header.d=hcv.hodaiweb.com header.i=@hcv.hodaiweb.com header.a=rsa-sha256 header.s=google header.b=OsN+STGN;
dkim-atps=neutral
Received: from mail-qv1-f70.google.com (mail-qv1-f70.google.com [209.85.219.70])
(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
(No client certificate requested)
by box.ecovillage.cc (Postfix) with ESMTPS id 20A263E900
for admin@web-analysts.net; Mon, 31 Mar 2025 11:38:09 -0700 (PDT)
Received: by mail-qv1-f70.google.com with SMTP id 6a1803df08f44-6e913e1cf4asf128820366d6.2
for admin@web-analysts.net; Mon, 31 Mar 2025 11:38:09 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1743446288; cv=pass;
d=google.com; s=arc-20240605;
b=NIWUf58709vyIo0cTxS40fBrcZz4RrCcyDPoQGEJ7j5PpcVcbtcxS7yQ9awvloJWZj
MIxbCy9AHoUc38cMfHM6eBEBuRhbjaZvDjw+wSEW4+Pc2egazZiN7MYMY1JOisRdRjnT
sDYVfoZUocCAulo0YlraNjXZ1lJM2MLjqe0UvTJOcB1w9YEQA6Fyph7nntf2jz+n4jzA
RybOUnP2mLfCWfXMH8M3Qf8FBQZiGzqqUAhn2i02x3pJYYkbh6WGTSXc4AqwhTv6VwmC
09sjeExyBnbSaPEAJrImD0nsQL2MYhv39CvrHDPa5MsQz1Ht8QCAGa/QnusUgKahp9Sk
boBg==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=list-unsubscribe:list-archive:list-help:list-post:list-id
:mailing-list:precedence:to:subject:message-id:date:from
:mime-version:dkim-signature;
bh=HKm1QxWOgVFFCDIRulpuYrjBgZaaZH1+RXbowzRESPw=;
fh=t7QqgxtX5Mr4AlEVryststlvfRZoaXbnKATAZw893mc=;
b=J9jJpeTc+Zmt+L5uh58oi07tBZNNMJowx5lbMmkD/Tkj5fCIstfuv09FsGPeWEEvMm
5ykvZy+DD7erpgkSwc7tYc0AWFEu7+Q7ORUZ9AGfvIhbo2iL9+olOq4O8feGuPmELYke
MG2zShn7j85xog0WnO2IlVGKxPshdoeXvLNQmAs9AOd/YHsBO3ScATv5LweaGBgHmshx
DsmqaMCc1VptLVmx1ACxCsjFSm0t41lCeV/1CXd/Apt7YfuhmBMobYDEJplluemixZmm
jvaK2MX9774rzSR3NL3M56kNZdCbM0KtSY7eNYTjFYyQrYqWtnDjIiBtmxCJaUZyNANO
Fy8Q==;
darn=web-analysts.net
ARC-Authentication-Results: i=2; mx.google.com;
dkim=pass header.i=@hcv.hodaiweb.com header.s=google header.b=U2V9Zgyy;
spf=pass (google.com: domain of support@hcv.hodaiweb.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=support@hcv.hodaiweb.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=hodaiweb.com;
dara=pass header.i=@hcv.hodaiweb.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=hcv.hodaiweb.com; s=google; t=1743446288; x=1744051088; darn=web-analysts.net;
h=list-unsubscribe:list-archive:list-help:list-post:list-id
:mailing-list:precedence:x-original-authentication-results
:x-original-sender:to:subject:message-id:date:from:mime-version:from
:to:cc:subject:date:message-id:reply-to;
bh=HKm1QxWOgVFFCDIRulpuYrjBgZaaZH1+RXbowzRESPw=;
b=OsN+STGNMEg0rGRTcI/qPeCETznd3jHJ9KjQ6PjbfeXwBGZlIk2lOMtFV+PfhRMSby
ApTe666LgRiHMwbrysnfG7NY+4XQrFyh6O+LnQoxWduPb95NgBjuDFzBgDgSZ48MM8b2
2QqFUQx8ks1+paE8uc3Sck4HPsnO7ItdoWEV8=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1743446288; x=1744051088;
h=list-unsubscribe:list-archive:list-help:list-post
:x-spam-checked-in-group:list-id:mailing-list:precedence
:x-original-authentication-results:x-original-sender:to:subject
:message-id:date:from:mime-version:x-beenthere:x-beenthere
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=HKm1QxWOgVFFCDIRulpuYrjBgZaaZH1+RXbowzRESPw=;
b=cXbpwFNd5s2RwEuNlACJ0iVmQxOz9FMNdCYpk2eisIdorCMhqOeQAeEfshN5rN4qZe
MqAKXdLnxvJhO3e8lF3UZ/Hk5DNVcOz0dE/V/thgE/Fb+Ailfi6LJxz1ltA6FK77yGMn
SI/AxseaP0++9z/dJQEBu18PXDPJifTfr6jEIgTlG1C3sxiGG181RsTv4h9epOKtOqYL
liKkxhxWOFckY7FyjKeQCH8bVX3Hn2sgePXgRx1c+TecAZy/9dAJMtnQBJrPDTKfv4+x
8DTRO0Jpo/g9U2rJzmqjsfBnhnSEe7BlA27Z1RKhNzY9VwWeOQOlXGRrhjFqVEW870g4
8IJg==
X-Forwarded-Encrypted: i=2; AJvYcCXqCe3y0tE8ZQZ1fg24/sQ33nYrKJ1Wnwzle1JIwjGmL8Wk1Yzn6IBy3ASAieu5D6t6d5L0oA==@web-analysts.net
X-Gm-Message-State: AOJu0YxrEoGvGrlg7NH9tbxHHT0Hrp35tC4h1SX572ewQJwgj9WikG15
7LKQ6SYl3QZgTJJV4zxaRptBsqLxYWmzlGuqdyqWEf7ps+5TUKjAKU5+E8mQ9Ho=
X-Google-Smtp-Source: AGHT+IEnFkS9i3PGsRrC8I3uQCe0yzdFza1QX35TwwEjDYFwrNAds+3nFjaHouneNaWWtaDUKeMe+g==
X-Received: by 2002:a05:6e02:1fea:b0:3d5:7f44:9e86 with SMTP id e9e14a558f8ab-3d5e0a09af0mr105885045ab.22.1743446277822;
Mon, 31 Mar 2025 11:37:57 -0700 (PDT)
X-BeenThere: hj@hcv.hodaiweb.com; h=ARLLPAJctI+iW5XFPAEZklWzvaAB7QWyALwvbqPNSLTVpRi+bA==
Received: by 2002:a05:6e02:2489:b0:3d5:e479:cca0 with SMTP id
e9e14a558f8ab-3d5e479cd04ls4917425ab.2.-pod-prod-06-us; Mon, 31 Mar 2025
11:31:18 -0700 (PDT)
X-Forwarded-Encrypted: i=2; AJvYcCXumryoO6BmawdGihfbUB5Hhp1n1AM7izPwKfNH6TV0j541pGxSquBylO6KBoOw3CfZlQ==@hcv.hodaiweb.com
X-Received: by 2002:a05:6e02:4401:10b0:3d4:3fbf:967d with SMTP id e9e14a558f8ab-3d5e0908eacmr64434395ab.7.1743445878020;
Mon, 31 Mar 2025 11:31:18 -0700 (PDT)
X-BeenThere: serviice@hcv.hodaiweb.com; h=ARLLPAKXsJjWrfkG5OpActnJk69GJzqVkAjKo5SkQRaOyPcZsg==
Received: by 2002:a05:6e02:3dc4:b0:3d2:abf9:2b19 with SMTP id
e9e14a558f8ab-3d5ccc58102ls4715475ab.1.-pod-prod-06-us; Mon, 31 Mar 2025
11:31:17 -0700 (PDT)
X-Received: by 2002:a05:6e02:4401:10b0:3d4:3fbf:967d with SMTP id e9e14a558f8ab-3d5e0908eacmr64433825ab.7.1743445877058;
Mon, 31 Mar 2025 11:31:17 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1743445877; cv=none;
d=google.com; s=arc-20240605;
b=GgFAwZLwNVM5dS7Np3lT9F7SV1TvCbAA7zRANha2YglqLk1KbDEmX+26/cc6UYWH2N
BUN/BrZ6r8kmDcTlrVFqwnn03IoNC9KnoCV9HJc5mw2ne9CzQ8GFcMuOFUM/97ywOmbz
cpWKKJzpgLk3ArVHvGchDzL2EN7r3CLfguqeP0H7D3qV3wpmt5TMfBQPEcDwLt46oOlV
EPP8VYRRRn3NppwFzgNF/ZS7imemVvWr/DX7mn+cWij2Tz8wh8pc/RqBALsOzJNdfgkT
ZZNQ/96kU55Q6dsqTo5hw3fP5ICUD3h7lQ4+ISq4SVLWtAyniys5Gqr/VpCGrDLpmOxA
+1Bg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=HKm1QxWOgVFFCDIRulpuYrjBgZaaZH1+RXbowzRESPw=;
fh=UfnHhalQpS2HXdhMT38TWqsYQnHdXGlu1Prmze5hOS0=;
b=VBJkflm0u0Z9UcWpEcIH52VcQfmR+0NdlXp/KVWeQ9j3jw1jmJOss0Yhii++BwNtMc
pd0rLhxJFsYrOwnGgcNToN2gcKF5df24EkMXz09qJAAuxpxgEUDmiLqgA4rwh/chrlap
0PoFtdWWc7qt0fBZdZWA+Q0MxIHHgwnAHB5/rkkppvf+CThWG4y3hxHGDYUFKpzj2ykM
+5YlynQylMvn4fHtrjTqNhYtJOX/1rLDaKtiqGip3MPq2XFbhflFJeiLI2uQqTrgaiqj
p1eu3q/vsdtPa66iDbqtjN1vXvPJwNiYG5hF3EnlTa/YGxQaaO2zkeiQ6Ym1iXYrbzDG
lRKg==;
dara=google.com
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@hcv.hodaiweb.com header.s=google header.b=U2V9Zgyy;
spf=pass (google.com: domain of support@hcv.hodaiweb.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=support@hcv.hodaiweb.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=hodaiweb.com;
dara=pass header.i=@hcv.hodaiweb.com
Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])
by mx.google.com with SMTPS id e9e14a558f8ab-3d5dda53345sor27071315ab.5.2025.03.31.11.31.16
for serviice@hcv.hodaiweb.com
(Google Transport Security);
Mon, 31 Mar 2025 11:31:16 -0700 (PDT)
Received-SPF: pass (google.com: domain of support@hcv.hodaiweb.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
X-Gm-Gg: ASbGncu3IBFsKheefVU0+ljsKevIJDSlP3fg8515VJVkMN+5Vu6VkAIp+BSlLA6aj7o
x84T/ZCsch3vuaMH/bQr3h2/uvu4JmndOO8rd0LPpxgCJp9XX2MStCRbqb0T486kWmmfdycSm4g
knsXi0p9DpeysGrrJW3oHSO0U8
X-Received: by 2002:a05:6e02:1aa2:b0:3cf:b87b:8fd4 with SMTP id
e9e14a558f8ab-3d5e09da197mr94433525ab.15.1743445876363; Mon, 31 Mar 2025
11:31:16 -0700 (PDT)
MIME-Version: 1.0
From: “Gardening-Essentials .” support@hcv.hodaiweb.com
Date: Mon, 31 Mar 2025 18:31:04 +0000
X-Gm-Features: AQ5f1JpnumQ_jPzghsLonBGVYiqNY_LlWsTTvKFHYOVkVXtbLP0w52Z6LfnDVDk
Message-ID: CAEO_PpCmZqOxbWYcQqRiNeVSw5M2U2bE27ewAG4_onhEQBn9gQ@mail.gmail.com
Subject: =?UTF-8?Q?Build_the_Garden_of_Your_Dreams_=E2=80=93_Free_Greenhouse=21?=
To: serviice@hcv.hodaiweb.com
Content-Type: multipart/alternative; boundary=“0000000000002570200631a7a077”
X-Original-Sender: support@hcv.hodaiweb.com
X-Original-Authentication-Results: mx.google.com; dkim=pass
header.i=@hcv.hodaiweb.com header.s=google header.b=U2V9Zgyy; spf=pass
(google.com: domain of support@hcv.hodaiweb.com designates 209.85.220.41 as
permitted sender) smtp.mailfrom=support@hcv.hodaiweb.com; dmarc=pass
(p=NONE sp=NONE dis=NONE) header.from=hodaiweb.com; dara=pass header.i=@hcv.hodaiweb.com
Precedence: list
Mailing-list: list hj@hcv.hodaiweb.com; contact hj+owners@hcv.hodaiweb.com
List-ID: <hj.hcv.hodaiweb.com>
X-Google-Group-Id: 659787247207
List-Post: https://groups.google.com/a/hcv.hodaiweb.com/group/hj/post, mailto:hj@hcv.hodaiweb.com
List-Help: https://support.google.com/a/hcv.hodaiweb.com/bin/topic.py?topic=25838,
mailto:hj+help@hcv.hodaiweb.com
List-Archive: https://groups.google.com/a/hcv.hodaiweb.com/group/hj/
List-Unsubscribe: mailto:googlegroups-manage+659787247207+unsubscribe@googlegroups.com,
https://groups.google.com/a/hcv.hodaiweb.com/group/hj/subscribe
It has a score of -1.6, mainly because the email passes all the authentication checks like SPF, DKIM and DMARC.
Spammers are doing a lot of things right these days. They use IPs that are not blacklisted, have correct SPF, DKIM and DMARC records etc, just like you when you set up Mail-in-a-Box. I mean, how is Spam Assassin supposed to know that it is “obviously” spam if everything looks legit?
Spam filters need to be trained, so I’d say always put messages like this in the Spam folder and you’ll see less of them in your inbox over time. However, you will never get 100% accuracy.
1 Like
Yes. Thank you.
dumb question here: is ‘junk’ the same as ‘spam’ (in Roundcube)?
Yes. and It also depends on the language you have set. When Roundcube is set to German, the folder is called ‘Spam’ and in the English version it’s called ‘Junk’.
Also, different email clients may name it differently. For example, in Thunderbird it’s also called ‘Junk’, even in the German version. In Evolution it’s ‘Unerwünscht’, which translates to ‘undesireable’ or ‘unwanted’, not sure if the English version uses the same term though.