Spam/bulk emails from NRRH OTM?

["Jim A. Bole" <jbole () STEVENSON EDU>]

Anyone else see a wave of spam/bulk from National Residence Hall Honorary - Of The Month today?

We received over 600, mostly quarantined or junk that look like this:

[cid:image001.jpg@01D602A4.34952510]

Header snippet:


Transport; Wed, 25 Mar 2020 09:02:18 +0000

Authentication-Results: spf=none (sender IP is 129.130.155.48)

smtp.mailfrom=nrhh03.nrhh.org; stevenson.edu; dkim=none (message not signed)

header.d=none;stevenson.edu; dmarc=none action=none header.from=;

Received-SPF: None (protection.outlook.com: nrhh03.nrhh.org does not designate

permitted sender hosts)

Received: from nrhh03.nrhh.org (129.130.155.48) by

BN3NAM04FT019.mail.protection.outlook.com (10.152.92.173) with Microsoft SMTP

Server (version=TLS1_0, cipher=TLS_RSA_WITH_AES_256_CBC_SHA) id 15.20.2856.17

via Frontend Transport; Wed, 25 Mar 2020 09:02:17 +0000

Received: from localhost (unknown [127.0.0.1])

by nrhh03.nrhh.org (Postfix) with ESMTP id 5D76C2A480E7

X-Virus-Scanned: amavisd-new at nrhh03.nrhh.org

Received: from nrhh03.nrhh.org ([127.0.0.1])

by localhost (nrhh03.nrhh.org [127.0.0.1]) (amavisd-new, port 10024)

Wed, 25 Mar 2020 04:39:11 -0500 (CDT)

Received: from nrhh03.nrhh.org (localhost.localdomain [127.0.0.1])

(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))

(No client certificate requested)

by nrhh03.nrhh.org (Postfix) with ESMTP id 2E1322A480DC

Received: (from root@localhost)

by nrhh03.nrhh.org (8.14.1/8.14.1/Submit) id 02P9dA2H020809;

Wed, 25 Mar 2020 04:39:10 -0500

Date: Wed, 25 Mar 2020 04:39:10 -0500

Message-ID: <202003250939.02P9dA2H020809 () nrhh03 nrhh org>

Subject: OTM Database Account Request

From: NRHH OTM System<>

Reply-To:

X-Mailer: PHP/5.2.6

Return-Path: root () nrhh03 nrhh org



**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community