The host at this IP address is being (ab)used to «listbomb» email addresses:
From: «Schulman b.v. Amsterdam Auctions» <info@schulman.nl>
Subject: Only 4 days to bid! — Nog 4 dagen om te bieden!
Problem description
============================
Spammers signed up for the bulk email service using the victim’s email address. As a result, the victim is being «listbombed» with transactional messages and bulk email campaigns.
Problem resolution
============================
In order to resolve this spam problem (and have this SBL listing removed), the affected sender must take the folloing actions:
a) Implementing CAPTCHA to prevent automated subscriptions
b) Implementing Confirmed Opt In (COI) if not already done so
c) Clean up their email address list (e.g. sending out a permission pass / COI)
Further reading
============================
Further information can be found on the referenced links below.
Subscription Bombing: COI, CAPTCHA, and the Next Generation of Mail Bombs:
https://www.spamhaus.org/news/article/734/
Mailing Lists -vs- Spam Lists:
https://www.spamhaus.org/whitepapers/mailinglists/
Confirmed Opt In — A Rose by Any Name:
https://www.spamhaus.org/news/article/635
Spamhaus Marketing FAQ:
https://www.spamhaus.org/faq/section/Marketing%20FAQs
________________________
Received: from mail-he1eur04hn0234.outbound.protection.outlook.com (HELO EUR04-HE1-obe.outbound.protection.outlook.com) (52.100.18.234)
by xxxx; Fri, 16 Oct 2020 13:48:12 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=hDooZ9idgsoEjdha9ybIolnQ6ZD8CDDukPzNFolj/ylCZLXXz6aDANj7+zd1VjcGiv6QoPm2eHmyc+gtCQUM4w//VP/fzZKRzhv3/tuY4QP4F2dGyxlI8woSpS3hHKunHCerEDIqm8nLqQO6HZMUCzW4MHn68qSvbD2XPxaV3rAWrO/8V54w8n3W7AL3FUYXEkHMtT/u8KDWZ7QlZn4NKFe9BS58FRXDdDnUEOMKlLjiSiNHv9bBW4iFpzb/YkRZh+Jx+65NQHDiVQ61arQAuksdDbpVJhkEY3vz0/MuJ8uvwzBcjU7Jxr8ifjEgNzOU+ttymz7JmaVlnYjEGwTB7w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=hDkS58vcDqOJNUJjuqq9719zweNLjLQr4fpKffK8Obk=;
b=BDIYaSneHbNDLRQlmtob+N/gofLWJxVHAG0fZWApY1fqM+3F9rylTbwfUklyd9thlqhuIZlvWhfoFVosEgsgMsKwOUwP/huPPZfsCpRZbjlNKbLd+neHRCnffrydnq6wMGreY561TTmrjHDsSkAD5KslkKUyAerUlwIfRvlDWK1VSTgebFmHhznfOjsyPtr6eoxTnWyIXDTpdhFXO3O2Ks/EvFf+9+Eo3z3lV9aVBazjG1kJbQMn9be2j33UkEWEZ1XfDKdc+8M4JNVRNjTkioqrSVFrNIslvDMVnMeQh/ZAsPShTtsNVWhGNx33T6MUn0nZajBnluBBr40HJMhg1g==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
smtp.mailfrom=schulman.nl; dmarc=pass action=none header.from=schulman.nl;
dkim=pass header.d=schulman.nl; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=schulman1880.onmicrosoft.com; s=selector2-schulman1880-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=hDkS58vcDqOJNUJjuqq9719zweNLjLQr4fpKffK8Obk=;
b=cvrMV5CfGQ1yTUBm1QJc/1zxbj2wq3+62meUKE/hghiJCxN10Fff7Nq4m65F6MTErGIkdhNgsL3KDDPnv2igcV8Rb2rOXt5OKn+FdWoa58nIPHD8zgvwn2K8AJ/ZaAUPja/Nnf/J7q76KOU36JkUzStmfDnVytV+C6pNetiTdWU=
Received: from AM0PR08MB5299.eurprd08.prod.outlook.com (2603:10a6:208:18d::21)
by AM4PR08MB2753.eurprd08.prod.outlook.com (2603:10a6:205:b::26) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3455.21; Fri, 16 Oct
2020 13:48:10 +0000
Received: from AM0PR08MB5299.eurprd08.prod.outlook.com
([fe80::6002:5b5d:88f2:d62]) by AM0PR08MB5299.eurprd08.prod.outlook.com
([fe80::6002:5b5d:88f2:d62%8]) with mapi id 15.20.3455.032; Fri, 16 Oct 2020
13:48:10 +0000
From: «Schulman b.v. Amsterdam Auctions» <info@schulman.nl>
To: xxx
Subject: Only 4 days to bid! — Nog 4 dagen om te bieden!
Thread-Topic: Only 4 days to bid! — Nog 4 dagen om te bieden!
Thread-Index: Adaju6XI3chyCs5KRTapJh6/s2Qw5A==
Date: Fri, 16 Oct 2020 13:48:09 +0000
Message-ID:
<AM0PR08MB5299AA04304F2DF4A56F8564DB030@AM0PR08MB5299.eurprd08.prod.outlook.com>
Accept-Language: nl-NL, en-ZA, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
authentication-results: xx.org; dkim=none (message not signed)
header.d=none;xx.org; dmarc=none action=none header.from=schulman.nl;
x-originating-ip: [92.65.159.166]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: dc908dad-2ff5-4b7e-6891-08d871da1e7b
x-ms-traffictypediagnostic: AM4PR08MB2753:
x-microsoft-antispam-prvs:
<AM4PR08MB27537ED3926B795BA0DF00EBDB030@AM4PR08MB2753.eurprd08.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:5236;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info:
0mHXBNMyBMGx1XgLZmHeZ552eJhDvSbhUWrevkv5aUeU4i4kuFWRvhlDp+6/zEBwLpSOWeiNwE88PHwXfDEkm+QG9OamWL6b5RqLrE9v8/vGGktclQscRr7WBPCwFMQkE3/NU1jIwpRmOI1KIvqcOPVynygUOEJFNnvLEq+qQFXndo4nIftuYoQqnjZO/m+UMethBiv6bU3gNbKtaTQNmqbraMPnPkYSCZon7wBf5cnaBNnolj31rhXLRxhCsGwGkzQN9OHXaeUyY5d++hczIXo0RbXab46loQ5KxZ3CBDSaPfJ5TbbplTVBZXxSUr63ka6apenyMD9qP0DXzPwcnoaz7G2IKfNvllgzJaBnrz2nL/nOfrxWklSzxJuR8/Syyj5n7jnmn39K0Vww99lc4A==
x-forefront-antispam-report:
CIP:255.255.255.255;CTRY:;LANG:nl;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM0PR08MB5299.eurprd08.prod.outlook.com;PTR:;CAT:NONE;SFS:(376002)(346002)(136003)(39850400004)(396003)(366004)(6916009)(478600001)(6506007)(5660300002)(52536014)(66946007)(66446008)(8676002)(26005)(66556008)(99936003)(66476007)(33656002)(8936002)(2906002)(64756008)(76116006)(66576008)(55016002)(316002)(86362001)(9686003)(32130700001)(7696005)(71200400001)(186003)(166002)(579004);DIR:OUT;SFP:1501;
x-ms-exchange-antispam-messagedata:
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
x-ms-exchange-transport-forked: True
Content-Type: multipart/related;
boundary=»_021_AM0PR08MB5299AA04304F2DF4A56F8564DB030AM0PR08MB5299eurp_»;
type=»multipart/alternative»
MIME-Version: 1.0
X-OriginatorOrg: schulman.nl
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AM0PR08MB5299.eurprd08.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: dc908dad-2ff5-4b7e-6891-08d871da1e7b
X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Oct 2020 13:48:09.9406
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 99a95169-92ed-45f8-9c91-f7a045fee2b0
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: KjCEAfNXZEvtf3fUc3teLUsK6/deeHhtuaATYlB+atGKQmJfJUHqxYTAjDnpTcjW1b2Dd6P/R9sjEQ3sX9tYfQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR08MB2753