|
I know, don't give out my email address to strangers.
But apparently, I'm past that point.
Fact is, since about two months I receive daily spam messages.
"H i m y n a m e i s C h r i s t o p h e r"
"Sander Rossel, your bol.com gift card is ready!" (I get this one daily, from [probably randomly generated]@[same randomly generated].us)
"Petlove - [Spanish(?)]"
How can I find out where they come from and how can I stop them, if this is at all possible?
These mails have "unsubscribe?" links, which I'm obviously not going to click 
|
|
|
|
|
Get a new email address.
That's the only proactive way to stop spam. Everything else is reactive and has to learn what spam is before it can filter it out.
|
|
|
|
|
That's not really an option.
Besides, it'll only be a matter of time before I get spam on the new address too
|
|
|
|
|
Yep! My work email address gets spam and the only place that address has ever been used is on some vendor websites.
So, at least one of them has been selling their customer/address list.
|
|
|
|
|
Sue them all, just in case 
|
|
|
|
|
Could be an inside job, too. A few weeks after a merger which gave me a brand new email address I never used anywhere, I started receiving spam on the unused address. I figure that one of the thousands of third party contractors scraped the whole address book and sold it for a few dollars.
|
|
|
|
|
Sander Rossel wrote:
Besides, it'll only be a matter of time before I get spam on the new address too
So then you're hosed either way. Case closed.
"One man's wage rise is another man's price increase." - Harold Wilson
"Fireproof doesn't mean the fire will never come. It means when the fire comes that you will be able to withstand it." - Michael Simmons
"You can easily judge the character of a man by how he treats those who can do nothing for him." - James D. Miles
|
|
|
|
|
The solution of last resort, IMO. You're seriously inconveniencing all your contacts more than anything else.
And it's not much of a long-term solution either - the reality is, you don't have to give out a new email address to anyone for the spammers to start sending junk to it. It'll be discovered sooner or later, and then they all start sharing the address with their buddies.
I've registered accounts with variations of my name on a few of the more popular free email systems, and I can guarantee some of these have never been shared with anyone. That includes systems that have been put together by people who (you'd think) have a pretty good grip by now on how to handle spam (Gmail and Outlook among others). Yet spam still makes it in. That means there'd be plenty more coming in on systems that aren't as good at identifying spam.
|
|
|
|
|
dandy72 wrote: And it's not much of a long-term solution either - the reality is, you don't have to give out a new email address to anyone for the spammers to start sending junk to it.
Yep, and that's the point. There really isn't any way to stop getting spam, either short-term or long-term.
You can create a new address. You'll stop getting spam, but only for the short-term.
|
|
|
|
|
Speaking as someone who has run Exchange since 1994, i can tell you it is a pretty complex subject. It's a whole science. The technology is always changing, the criminals are finding new ways to try and exploit people. It's a war.
It's a war I mean to win.
But you have to keep on top of your edge firewalls, examine logs daily. DKIM and SPF are critical. Careful configuration of DNS based blacklists are critical.
99.99% of spam is dropped by simply blocking non-conforming inbound messages. I then have my firewall block their subnets for a year to cut the noise traffic.
Right this minute I have over 1/2 million subnets blocked on an edge firewall... All of that is totally automated but I have to keep on top of it to make sure nothing gets through.
On our entire infrastructure, I can remember getting 1 spam email in the last 2 months. (the firewall drops about 1 a second).
|
|
|
|
|
This is my GMail account, don't think I have all those options (or want to get that deep into it) 
|
|
|
|
|
Hi Sander,
That is really odd. I have had a Gmail account from more or less when they became available ( 15 odd years ago or so ) and I have to say Gmail has always been quite good at blocking spam etc... Something slips through every now and again bit it is very rare. I wonder why yours might be doing so much worse.
Every now and again I have look at the spam folder just to see how many Nigerian princes are willing to share hidden funds with me, after paying a certain amount of money to get access to them of course. 
|
|
|
|
|
Yeah, me too.
GMail is pretty good, but since a while, about four a day slip through.
It happens more often, but never more than a few days so this has been going on far longer than usual.
There's still a good chance it will just stop at some time though.
|
|
|
|
|
The other problem is, GMail blocks emails that aren't spam. I used to get 40-50 spam emails a day although it's dropped to 20-30 in CoViD-19. (Why?)
Maybe 4 or 5 a week would be emails which should have got through.
So I check my GMail spam folder every day.
|
|
|
|
|
I read ALL my mail, so if I get a spam message my spam folder will go to the top and show (x) unread emails.
For some reason, almost all my Microsoft/Azure/DevOps newsletters are spam so I whitelisted the Microsoft domain.
Other than that it rarely happens though.
Four to five a week sounds like a lot, are they from the same person/company?
If so, consider whitelisting them.
|
|
|
|
|
All I can say is don't bother setting up rules if you're using Windows 10's built-in email client. I don't know how Microsoft can claim it works at all.
|
|
|
|
|
I have the same experience. Windows 10 Outlook NEVER properly handles spam. It allows dumb stuff through and filters out emails from people's email addresses that I've authorized/white listed. Fairly worthless spam filtering!
|
|
|
|
|
I would be curious what the domain was for your spam you are talking about.
I've gotten to the point where I can recognize a "NameCheap.com" spam without even doing a Whois on it.
Did it come from a .info, .xyz, .pw domain for example?
You need to 100% block ALL of those - permanently. They are 100% spam.
|
|
|
|
|
Haven't checked, I just had one from .us.
I don't doubt that it is spam, even without looking at the domain.
It gets in my spam folder, but I really just don't want it at all.
|
|
|
|
|
Oh oh oh oh!!!!
Please do a whois lookup on that .us domain. Or just give me the full domain name I will do it.
PLEASE
I want to hear.
|
|
|
|
|
V683V6PKG.us, no data / failed to get data.
This is the first time I looked at the domain name.
Tomorrow I'll probably get it again, but with another generated code.
|
|
|
|
|
Thanks for posting that.
I'll bet if you look deeper at the headers you will find the TLD that points to Namecheap.com as the registrar.
I've been fighting this war with them for 10 years now.
I will bet my left nut it's Namecheap.
|
|
|
|
|
I already deleted the email.
I'll keep an eye on it when I get new ones.
|
|
|
|
|
Outlook client lets you view the email source and the Internet headers so you can see where the email actually came from (see sample below). I do not use Gmail I do not know if it has the same capability.
_________________________
Return-Path: mail02-ca244-44788-jamacdonald=erols.com@d24.tplusmail.com
Received: from mx01.rcn.cmh.synacor.com (LHLO mx.rcn.com) (10.33.3.179) by
md01.rcn.cmh.synacor.com with LMTP; Mon, 15 Jun 2020 09:08:45 -0400 (EDT)
Return-Path: <mail02-ca244-44788-jamacdonald=erols.com@d24.tplusmail.com>
X_CMAE_Category: , ,
X-CNFS-Analysis: v=2.3 cv=CsXBjUwD c=1 sm=1 tr=0 b=1 cx=a_idp_c a=HnCwvRV+xY/I/cxHJFt8Kg==:117 a=HnCwvRV+xY/I/cxHJFt8Kg==:17 a=KGjhK52YXX0A:10 a=nTHF0DUjJn0A:10 a=5KLPUuaC_9wA:10 a=M51BFTxLslgA:10 a=LhVmGQxXAAAA:8 a=bMKPYyKNAAAA:8 a=yoDDcn9cAAAA:20 a=kkeZQVVqAAAA:20 a=OwaX6NWWEkG79epqXcAA:9 a=QEXdDO2ut3YA:10 a=77R4OUVoh7cA:10 a=YdeoRYLMNAkA:10 a=SSmOFEACAAAA:8 a=9XAAIRTlAAAA:20 a=nX4LI99Z6BcihDCH5lcA:9 a=i5lCgKgHOGmsqgGR:21 a=frz4AuCg-hUA:10 a=_W_S_7VecoQA:10 a=Tc6xnW_7GzRn6Cje9123:22 a=W3F0SFC1vDmyWr4U9_Ew:22
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
X-Received-HELO: from [74.118.107.109] (helo=smtp1-39.mail02.topicaplus.com)
Authentication-Results: mx01.rcn.cmh.synacor.com header.DKIM-Signature=@d24.tplusmail.com; dkim=pass
Authentication-Results: mx01.rcn.cmh.synacor.com smtp.mail=mail02-ca244-44788-jamacdonald=erols.com@d24.tplusmail.com; spf=pass; sender-id=pass
Authentication-Results: mx01.rcn.cmh.synacor.com header.from=info@d24.tplusmail.com; sender-id=pass
Received-SPF: pass (mx01.rcn.cmh.synacor.com: domain d24.tplusmail.com designates 74.118.107.109 as permitted sender)
Received: from [74.118.107.109] ([74.118.107.109:51217] helo=smtp1-39.mail02.topicaplus.com)
by mx.rcn.com (envelope-from <mail02-ca244-44788-jamacdonald=erols.com@d24.tplusmail.com>)
(ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTPS (cipher=AES128-GCM-SHA256)
id 8E/8A-40876-CD277EE5; Mon, 15 Jun 2020 09:08:44 -0400
Received: (GreenArrow 98530 invoked by uid 1003); 15 Jun 2020 13:08:44 -0000
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed;
d=d24.tplusmail.com; s=default; h=Date:Message-ID:
List-Unsubscribe:To:From:Subject:Sender:Reply-To:Content-Type:
MIME-Version; bh=S+dpslEdxwy6RYDXX+x2NvtebVs=; b=gUgv64WGU6pd2Bf
gVoj4+AG+njw5mo/6ExPKapSWXGsvvJ4Kzhwnz41HtrE3U+lKTUoP+eztc8NNBVM
EUT6z7WhiKPmpSncUZR6YkBQ2BtuIW7LM7pMayVijfW8tIfDnAFTmqkqtegl6YFx
RQWD83qe0xEY+6GA5JrQcGefKH6A=
Date: 15 Jun 2020 13:08:44 -0000
Message-ID: <20200615130844.98524.qmail@mail02.topicaplus.com>
X-Mailer-Info: BQt3AQDfrzWjYzM5LzIlDUS5ozSvpKOhrz53YQD0Zz5j
List-Unsubscribe: <mailto:unsubscribe-BQt3AQDfrzWjYzM5LzIlDUS5ozSvpKOhrz53YQD0Zz5j@mail02.topicaplus.com>, <http:
To: jamacdonald@erols.com
From: =?UTF-8?Q?RosettaStone_Associate?= <info@lurqly.com>
Subject: =?UTF-8?Q?Learn_to_Speak_a_New_Language_with_Rosetta_Stone!?=
Sender: =?UTF-8?Q?RosettaStone_Associate?= <info@d24.tplusmail.com>
Reply-To: =?UTF-8?Q?RosettaStone_Associate?= <info@lurqly.com>
Content-Type: multipart/alternative; boundary="----=_Part_8144_2700543.1116436017268"
MIME-Version: 1.0
|
|
|
|
|
Oh the irony - this was caught by the spam filter 
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
