Spam emails increasing.

[John Schmidt]

Can't help but wonder what's going on. Used to be over a 24 hr. period I might get 10-12 spams at the most, been that way for years. Now suddenly over the past 2-3 weeks in a matter of 2-3 hours I'll get a couple dozen spams, overnight it often approaches 100. I'll delete it all without ever opening them, usually the first thing in the morning but by noon I often will have 30-35 new ones. Delete them again and it repeats itself by dinner time. Anybody else have such an experience? I do use Google Chrome as my search engine, maybe it's time to switch. 

Of course my son-in-law has to rag on me a bit...telling me "dad, you have to quit with all those porn sites!" Yeah Andy, that's got to be it! 

[hubcapsc]

Who runs your email? gmail does a really good job of spam filtering
from my perspective...

-Mike "but then I don't look at russian porn sites  ... "

[carolinarider09]

I have had similar problems with my "gmail" account.  All of a sudden, last two or three weeks, I get 20 to 30 spam emails a day.

Viewing them on "Mail" on my MacBook, the majority of the message is numbers and letters.  Not real text like this. 

--15M-HLAXWWB2W-HZCICHT-FCVKEF-5IBJ
Content-Type: multipart/alternative; boundary="36VE-GR3FVK-HOZY4QUD58Z-GR3FVK-U7VOQ"

--36VE-GR3FVK-HOZY4QUD58Z-GR3FVK-U7VOQ
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

I have tried to "inform" Goggle about the issue since they are obviously from bogus email addresses.  But there is no real method to make them notice. 

I have forwarded them to Help, Admin, Administrator and the first few might get through but after that, Goggle just reject them. 

So.........  I too wonder and would like to make Goggle take notice but don't have a real way to do that. 

[hubcapsc]

I don't think anyone at "goggle" is going to respond to
any inquiries from their email users. Probably all they care about
is analyzing your emails so they can show you ads. They
check for spam along the way since they want you to to
keep using them.

I just checked my spam folder there, there's 10 messages
in it. Most are either from Triumph or Indian.

John's son-in-law and me were just joking about porn sites,
but we're all being tracked as we browse the Internet and
that likely affects the kinds and amounts of spam we receive...



-Mike

[Serk]

I get several hundred a day to my main e-mail, and several thousand more to the honeypot addresses I have.

Nice to run my own e-mail server, I have a heuristically trained Spamassassin daemon running that catches about 99.9% of it and the bits that slip by I feed back into it to train it better.

And every single one of the spams I get are reported to Spamcop to help shut down the hosts they're spewing from.

[hubcapsc]

Nice to run my own e-mail server

I was running the one at clemson when the the milter
plugin for sendmail was first released. It was fun writing
and tweaking my milter. I wouldn't want to run an email
server for fun nor money nowadays... before the milter
I remember writing sendmail rules that caused you to
have to authenticate if your email didn't start out at
a clemson.edu domain...

I'm just guessing at why my gmail mbox is so spam-free,
and other have lots of spam...

-Mike

[carolinarider09]

And every single one of the spams I get are reported to Spamcop to help shut down the hosts they're spewing from.

Looks like Spamcop requires some actual work to use.  For instance, I get a message whose main email address is w273h9lt8me242q@i6aHf7h9RR6wFcpT98ppasturageleans.com and the message is sent to [*to].

It is obvious spam not doubt....

This one has "PayPal" as part of the main text.  from PIWhr@rilypfefc.usand sent to cONTACT@static.65.147.216.95.clients.yourserver.de.  The text says its from "Blackfridaycredit.com". 

Both are obviously spam.  I will not click the link to remove myself from the mailing list since that click might well send me to some gulag. 

[Jess from VA]

I only get maybe one spam every other week.  And those are sites that sell things I might be interested in, though I always unsubscribe. 

I don't know why, but it might be because I still run windows XP. 

[Moonshot_1]

Can't help but wonder what's going on. Used to be over a 24 hr. period I might get 10-12 spams at the most, been that way for years. Now suddenly over the past 2-3 weeks in a matter of 2-3 hours I'll get a couple dozen spams, overnight it often approaches 100. I'll delete it all without ever opening them, usually the first thing in the morning but by noon I often will have 30-35 new ones. Delete them again and it repeats itself by dinner time. Anybody else have such an experience? I do use Google Chrome as my search engine, maybe it's time to switch. 

Of course my son-in-law has to rag on me a bit...telling me "dad, you have to quit with all those porn sites!" Yeah Andy, that's got to be it! 

You're deleting them?

I'm pretty sure that guy from India, you know, the guy's dad was king of that african country and he died but his brother had a business connection and he amassed 10 billion dollars and knew you to be an honest man and a friend.

You get it all. Just pay shipping and handling. Only 600 dollar. Hope this finds you well.

Those guys are trying to contact you and you are deleting the emails. Never get rich that way.

[0leman]

Not sure where some of you are going on the internet to get these spam emails.  Only emails I get are from folks/companies I have done business with in the pass wanting me to buy more of their products.   

So far I haven't gotten any of the above mentioned emails. I do use gmail.   Maybe just lucky.

Though have gotten text messages from some site wanting to loan me money.  No haven't gone after a loan in a number of years. 

[TJ]

 you have to quit with all those porn sites!"   

[John Schmidt]

you have to quit with all those porn sites!"   

I know TJ, but those were such good site names you gave me. 

[carolinarider09]

Ok, based Serk's recommendation, I joined Spamcop.  No issues on joining and am now waiting for "spam".   

[carolinarider09]

Got a bunch of spam messages today.  Forward them all to Spamcop.  Spamcop rejected most of them  stating....

SpamCop encountered errors while saving spam for processing:
SpamCop could not find your spam message in this email:

Therefore Spamcop is useless for stopping messages like the following.

OBTW the senders email address is:  TMobile with the following address for the sender
v9owwzm6mtou5hq@82876.choi-hunter.worktowardsinlife.com

Part of message text. 
--00000000bhhSzK1z.1TElYUDSzK1z.1TElYUD@gmail.comn1
Content-Type: multipart/alternative; boundary="00000000nt8SzK1z.1TElYUDSzK1z.1TElYUDp6h"

--00000000nt8SzK1z.1TElYUDSzK1z.1TElYUDp6h
Content-Type: text/plain; charset="UTF-8"   
The assembly plants building some of Ford?s best-selling and most profitable vehicles will become a beehive of electric-vehicleMNVDYDAXICOAWDP and hybrid activity over the next four years. At the same time, new versions of the sporty Mustang are on tap for the plant south of Detroit building Ford?s pony car. Those are just three of the promises we found in the new four-year labor contract Ford workers recently voted on. MNVDYDAXICOAWDPThe analysis in this column is based on reporting by my colleagues Phoebe Wall Howard, Jamie L. Lareau and Eric D. Lawrence on detailed investment plans in Ford?s new contract with the UAW.
   
--00000000nt8SzK1z.1TElYUDSzK1z.1TElYUDp6h
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: 8bit+

[Jess from VA]

All this spam is more related to cell phone use than computer use, right? 

I know cell phones are computers, but you know what I mean.

I never owned a cell phone of any kind.  I don't even know how to use one.

When on group rides on a break, and every guy on the ride goes to his phone, I just drink water and talk to myself.   

[Serk]

Spamcop requires the full headers to extract the actual source of the message. It can be a little tricky to set up properly if you're not used to it.

I use Thunderbird as my e-mail client, and an addon called HabuL that simplifies and automates the Spamcop reporting process greatly. Honestly I wouldn't mess with it without some sort of e-mail client helper app to automate the reporting.

But even with that, it takes some configuration and tweaking to get it working right.

[carolinarider09]

I shall endeavor to see if I can make that work. 

I believe these spammers need to be held accountable.  It appears to be impossible to determine the origin (platform, ect) of the email just basded on the address. 

[carolinarider09]

In doing a search, I found this website.  Will give it a read and see what, if anything, I can do.

https://www.jcrdesign.com/junkemaildeal.html

[carolinarider09]

Just a little update.  I tired to report another address/email to Spamcop just now.  I simply copied the address from which the email was supposedly sent into the Spamcop reporting window.  Here is the response. 

I highlighted the line of interest.   

Knowing, to some degree, how these websites operate, the email address is fake and the only thing they want me to do is to clink on a link.  Don't know what more I can do unless I can find an address at Goggle that I can forward them to.

Parsing input: kqw@ymoue.yoqjb.ixgjlde.cbe
Cannot find an MX for ymoue.yoqjb.ixgjlde.cbe
Host ymoue.yoqjb.ixgjlde.cbe (checking ip) IP not found ; ymoue.yoqjb.ixgjlde.cbe discarded as fake.
No mail exchanger. Email to this address would bounce.
Cannot resolve kqw@ymoue.yoqjb.ixgjlde.cbe
No valid email addresses found, sorry!
There are several possible reasons for this:
The site involved may not want reports from SpamCop.
SpamCop administrators may have decided to stop sending reports to the site to prevent listwashing.
SpamCop uses internal routeing to contact this site, only knows about the internal method and so cannot provide an externally-valid email address.
There may be no working email address to receive reports.

[Serk]

Whatever e-mail client you're using, look for an option about Headers, specifically "Show full headers" or "Show all headers"

You need to make sure it's showing you all the headers, often other than the last one or two hops are truncated, but Spamcop needs all of 'em in tact to be able to trace back where it really came from.

(And yeah, the e-mail address is says it came from is almost guaranteed to NOT be.)

[carolinarider09]

Ok, Found it and "holy crap Batman"...   (still a work in progress.  I don't like to lose).

Received: by 2002:a05:7010:79a8:b0:198:4aa5:83db with SMTP id u40csp3949175mdl;
        Sat, 13 Nov 2021 10:25:03 -0800 (PST)
X-Google-Smtp-Source: ABdhPJyVCuuvc1CEdBCFsuNi0+O5rZHY9WAAIGtkSEpOMCaNsAMt3NnhVgwWP3azBQtxmhTsttnH
X-Received: by 2002:a9d:6b87:: with SMTP id b7mr20519716otq.204.1636827903454;
        Sat, 13 Nov 2021 10:25:03 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1636827903; cv=none;
        d=google.com; s=arc-20160816;
        b=InAFS107KDfqq7eqiCWrhJGU8yP7jQd5HbA9WeIWK8/jTDbXccJWksDJ/u+eQHr4Yr
         YlddHL8q0NRNfkeUqOczQ6020ctPk4EjVto6jqGeCrTwI54P4pQo0tGGvApoaZo1yZsJ
         g8e4twHbpTdpAhUJer8HUNSLyn7A0oprUnT4mAC02O/xVGT4a2YNn3oAt2x8VpTmxOTy
         pr159E5UDkl/nulmpe4mq0jC2xhCWGIT7lWdPBe4kII6IetyHScjDcUOQZH9GzgDZFLl
         8cZbflt8QwvYD7JvKFqjdkXr2iy6WZRzwQHQ0ow0ZS7sCFUCWYqcpJfuITMW+QJ2hOHN
         ZLyQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=date:cc:to:subject:from:message-id;
        bh=Y+ml7xBXyXF/ViwLnm67RYgOZaVbnKRgnLBUzR7Hi0A=;
        b=vMtoG2nuxZwEzvHpF7GFwopWLP/YYBf3F3SiHpsjnd8+k8MxvvWNcZSCK0DbMNAI/g
         GaI7ClvttMSreYuP0g82KsXTLvrgxwCvjNMbquh7LsdLShBEjNmeI+jppqBzbpOl/FRx
         xh8WIWHi4rOhCNiLzEm6yOdFcudQkt/lysN/L8bKoA9gZjHKoIHAdA+LcL580cwfAIDV
         8MbafQj0fy+izZ2yB64l6ngPeD5y8Or3UOVUImtfF3KL11XijHSl7rXhxs4B1bSPMQ3K
         cqPcv/vphEhTJxyokjEyCB491HZOyyMFAJC5jPjZyBDnIQNUfBc4qkloAw0STTtUqm6Z
         pJnQ==
ARC-Authentication-Results: i=1; mx.google.com;
       spf=pass (google.com: best guess record for domain of return@googleoffers.2021dzsobk.5452959465510----------------.com designates 103.168.67.123 as permitted sender) smtp.mailfrom=return@googleoffers.2021dzsobk.5452959465510----------------.com
Return-Path: <return@googleoffers.2021dzsobk.5452959465510----------------.com>
Received: from copeland.bloggerunique.com (copeland.bloggerunique.com. [103.168.67.123])
        by mx.google.com with ESMTP id a26si16225493oto.18.2021.11.13.10.25.03
        for <carolinarider09@gmail.com>;
        Sat, 13 Nov 2021 10:25:03 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of return@googleoffers.2021dzsobk.5452959465510----------------.com designates 103.168.67.123 as permitted sender) client-ip=103.168.67.123;
Authentication-Results: mx.google.com;
       spf=pass (google.com: best guess record for domain of return@googleoffers.2021dzsobk.5452959465510----------------.com designates 103.168.67.123 as permitted sender) smtp.mailfrom=return@googleoffers.2021dzsobk.5452959465510----------------.com
Received: from woondardox.com (petis.iniducciany.com. [212.83.189.102])
        by mx.google.com with ESMTP id r26si19320951wra.208.2021.03.29.21.52.53
        for <saileforseenaa@gmail.com>;
        Mon, 29 Mar 2021 21:52:53 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of s0zly26x6qzuznesz8fc1d@b8.v0v.7o9s-.iniducciany.com designates 212.83.189.102 as permitted sender) client-ip=212.83.189.102;
Message-ID: <596605048.1c69fb81.508f.b946SMTPIN_ADDED_MISSING@mx.google.com>
From: 𝗨𝘀𝗽𝘀.𝗦𝘁𝗼𝗿𝗲𝘀 <riBrit.nooreplyv2k46tjjhyiji@ffaiye68bykqqoi.us>
Subject: 𝗥𝗲: 𝟮𝗻𝗱 𝗮𝘁𝘁𝗲𝗺𝗽𝘁 𝗳𝗼𝗿 Carolinarider 𝗰𝗼𝗻𝗴𝗿𝗮𝘁𝘂𝗹𝗮𝘁𝗶𝗼𝗻𝘀 Carolinarider
Return-Path: <0EVOMNxsvsJ19oupxsc@petis.copeland.bloggerunique.com>
X-Loop: <0EVOMNxsvsJ19oupxsc@copeland.bloggerunique.com>
X-Mailer: Alife12
To: carolinarider09@gmail.com
CC: <saileforseenaa@copeland.bloggerunique.com>
X-DkimDomain: Disable
X-DkimSelector: Disable
Date: Sat, 13 Nov 2021 13:25:02 -0500 (EST)
Content-Type: multipart/report; boundary="111111100000854585-1111111-ef9a9e9e28b57410b57ba723341aaaa"; report-type=delivery-status
X-Mailer: iPhone Mail (787852240Z331702)

--000000000000854585-4196786-ef9a9e9e28b57410b57ba72334122d43
Content-Type: multipart/related; boundary="111111100000854585-1111111-ef9a9e9e28b57410b57ba723341aaaa"

--111111100000854585-1111111-ef9a9e9e28b57410b57ba723341aaaa
Content-Type: multipart/alternative; boundary="000000000000854585-4196786-ef9a9e9e28b57410b57ba72334122d43b"

--000000000000854585-4196786-ef9a9e9e28b57410b57ba72334122d43b
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

You are not alone.
 =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=
=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C  =E2=80=8C =E2=80=
=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C  =E2=80=8C =E2=80=8C =E2=80=8C =E2=
=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=
=8C =E2=80=8C =E2=80=8C  =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=
=80=8C  =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=
=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C  =E2=80=8C =
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=
=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=
=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C  =E2=80=8C =
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=
=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C  =E2=80=
=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=
=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=
=8C =E2=80=8C  =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =
=E2=80=8CTo
stop receiving emails from William,  (
My dear Fafs,

[Moonshot_1]

Different kinds of spam

https://www.spam.com/varieties

[carolinarider09]

Lets see. Got married in December of 1969, left for Nuclear Power School in Bainbridge MD on January 1970 (after buying a brand new 1970 Ford Maverick).  Lived in "base housing" in MD.  And what was the main course at least one day a week??? You got it, good ole Spam.   

[Jess from VA]

Spam, sliced up thin and fried up crispy in a skillet is not a bad substitute for bacon.  With eggs.

It's a toss up which is more unhealthy.  But who cares?  Breakfast isn't supposed to be healthy, it's supposed to taste good (and make greasy farts).   

[carolinarider09]

Spam, sliced up thin and fried up crispy in a skillet is not a bad substitute for bacon.  With eggs.

It's a toss up which is more unhealthy.  But who cares?  Breakfast isn't supposed to be healthy, it's supposed to taste good (and make greasy farts).   

 

[carolinarider09]

Today, when I checked my email I had 45 messages in my Junk email box.

I have not had much luck trying to use SPAMCOP so I have, am, trying a different approach.  At the bottom of maybe 50% of the spam is the folioing:

The advertiser does not manage your subscription.
If you prefer not to receive further communication please unsubscribe here
Or write to: 928 S Dixie Hwy ,Unit #403, Lantana, Florida, 33472

So, yesterday I sent them a letter with a copy of an email for reference.  I also sent a message, on line, to the Leader of the City Council (I think that is the term) of Lantana, FL.  I did a check of the address and its located in a building, Ye Tower Plaza, that houses B Hair Artistry and Aesthetics, and Scandinavia Massage and Sports Rehab. 

The other most used "address" is one in Sacramento, CA as referenced below.  I sent a message to the Mayor of Sacramento as well (I know  )

The advertiser does not manage your subscription.
If you prefer not to receive further communication please unsubscribe here
Or write to: 5960 South Land Park Dr #557, Sacramento, CA, 95822

[carolinarider09]

So, I looked up the address of the Sacramento spammer.  Its in the same building as the U.S. Post Office and the "map" shows it to be located at "Axle Surgeons of Northern California".

Makes one wonder again.  Just like the email addresses, total fabrication????   

[Serk]

Makes one wonder again.  Just like the email addresses, total fabrication????   

I think that's a pretty safe assumption.

[Wizzard]

Spamcop requires the full headers to extract the actual source of the message. It can be a little tricky to set up properly if you're not used to it.

I use Thunderbird as my e-mail client, and an addon called HabuL that simplifies and automates the Spamcop reporting process greatly. Honestly I wouldn't mess with it without some sort of e-mail client helper app to automate the reporting.

But even with that, it takes some configuration and tweaking to get it working right.

I too use Thunderbird as my client and Spam Filter Pro and its totally controllable. Works great

[carolinarider09]

Did not find one for my MacBook.   Will keep looking.  Apple had some "suggestions" which I have implemented. 

[carolinarider09]

Just a personal update.

Now it appears that I am getting between 50 and 100 messages a day, basically from one of three sources (based on their notes of who to contact to stop).  

I suspect that somehow, in the last week or two, my  mail address got copied, pasted or otherwise identified as an "active" email address.  .  

So..... I spend about 10-15 minutes total per day blocking them and deleting them.  Not a lot to time.  But.....   I am looking at all possible options.

Still trying to work with the notion of spamcop.  

[Serk]

Your full e-mail address was posted a few times above in this thread, suggest editing those out before it gets out any more...

[carolinarider09]

Your full e-mail address was posted a few times above in this thread, suggest editing those out before it gets out any more...

Yeah I sort of thought about that when I did it..   I will fix it.

[..]

I never "unsubscribe". I believe that reveals a live email and then it gets passed around.

[carolinarider09]

I never "unsubscribe". I believe that reveals a live email and then it gets passed around.

Yes, that has crossed my mind.  I did send a letter but that is the same thing.  However, I did suggest I was going to get a lawyer.  I know probably a very "empty" threat.  But .......   

[Serk]

I never "unsubscribe". I believe that reveals a live email and then it gets passed around.

Yes, that has crossed my mind.  I did send a letter but that is the same thing.  However, I did suggest I was going to get a lawyer.  I know probably a very "empty" threat.  But .......   

I only use the "Unsubscribe" feature if it's an e-mail from a reputable business that I would have done business with. Other than that, if you unsubscribe all you've done is let them know they've got a live one.

[carolinarider09]

Ok.... I have been "blocking" all the spam and then was planning on making a rule to automatically delete them.

So, I have been doing that to each JUNK email (SPAM).

In my Junk Email folder on m MacBook, 99% of the messages there are in fact junk.  It takes about one minute to scan 45 messages to make sure they are real junk and then, I have found out, all I have to do is to press the Option, Command and J keys at the same time (I do it in that order) and all the junk emails are permanently deleted.   

So, they can send all they want

Now taking m five minutes out of my busy day to handle the junk these..... generate. 

[carolinarider09]

Just an update (for me).....

Spam has decreased over the past few days from the 100 plus I was getting to less than 50..   

Actually never counted them but those seem to the be reasonable numbers based on what I see. 

With Mac email, they all go to the Junk Mail folder and it takes just a key stroke to erase them (Option-Command-"J")

[Jess from VA]

Bill, maybe you're just a popular guy.   

I just deleted two this week. 

[carolinarider09]

I only got 12 or so today however, I got the following message four times today.  It did not make it to my "Junk" folder.  And I have not used a Norton product for over 10 years.  The "mailing" address is show as
webmaster@enlaregent.com

Message text

id:782073
YOUR SUBSCRIPTION nrton HAS EXPIRED!
Your subscription of nrton Total Protection has expired Today.
After the expiry date has passed your devices will become vulnerable for Hackers.

Referentie code    33127US
Name               xxxxxxxx
date expires       Wed,22 Dec-2021
account-ID         399875

Keep your Devices Safe NOW >>
Available (-60%) Renewal Discount Today : 1 min 87 sec

Renew your subscription by clicking the button bellow.

RENEW NOW :

https://qerg6s85df1g698se4r15g6sdfg.s3.eu-west-3.amazonaws.com/fezezf1ze5f1zefzefzf.html#/1O0m0c9lgp0iw54-wjcsw1b0k00r1ahiq4200001


Note: if no subscription is registred your account
will be marked inactive and be delete in 48 hours.