Jump to content

Gingko

Members
  • Content Count

    9
  • Joined

  • Last visited

Community Reputation

0 Neutral

About Gingko

  • Rank
    Newbie
  • Birthday 06/09/1956

Profile Information

  • Gender
    Male
  • Location
    France
  1. Gingko

    Spams received already outdated

    In the meantime, I sorted all the spams that I received from this "spam cluster" (that I identified as part of the same group by several common features). I have 158 spams so far, starting January 9th, incoming in two mailboxes hosted by the same ISP. They are coming from 10 different sources, the most active being : ncdhost.com (43 spams) hopone.net (41 spams) dacentec.com (23 spams) ni.net.tr (16 spams) The six others (datashack.net, heymman.com, layer6.net, uaservers.net, vernet.lv, wholesaleinternet.net) have less messages, and sometimes lasted only for a short period, meaning that the spammer can already having been shutted down by this hosting service. I could eventually forward all of them to their respective senders, but does it worth the attempt? Gingko
  2. Gingko

    Spams received already outdated

    One more thing about these spams: Although it is difficult to completely verify, I have some reasons to think that some of these spams, received once by SFR, could have be handled internally by SFR and distributed more than once to the recipient at random intervals. I receive many of these spams several times with identical contents, like if they would come back after having been completely deleted from the mailbox. After reporting, they could sometimes have been seen as duplicated reports. And if I look at my past reports history ( https://members.spamcop.net/mcgi?action=showhistory ), I can see that about half of them have been handled as "No reports filed" by Spamcop, without any more explanation. Gingko
  3. Gingko

    Spams received already outdated

    I don't understand. Where should I forward this if it is not to Spamcop? I hope you are not telling me to forward directly to the spammer or to some hosting service related to it? Gingko
  4. Gingko

    Spams received already outdated

    The ISP has be contacted by many angry users (not by me yet) for several weeks, and they only give hackneyed answers like "we are working on it" (for weeks !). About tracking URL, ok, so you are speaking about URLs specifics to a particular spam as it changes for each spam. For the quoted headers above, the tracking URL is https://www.spamcop.net/sc?id=z6611133626z038eafa006f7aed4232b8a0c6617a97az And NO, if I look at the headers of some regular mails, they do NOT go through front26-smtp-dirty.sfrmc.priv.atos.fr. Gingko
  5. Gingko

    Spams received already outdated

    Here is the header's of a typical spam that I received that way : You can see that the spam was sent on January 20th at 20:29 CET, but I received it today 13:59 CET. There is a "Received:" line for that, but SpamCop ignore them as the three last "Received:" lines are internal handling from the receiving ISP declared in the mailhosts setup … thus this internal handling is spanning 5 days ! A large part of the spams that I receive on this address has this huge internal handling time property. And this concerns only spam. Regular messages that I send to myself to the same address are delivered in a matter of seconds. Gingko
  6. Gingko

    Spams received already outdated

    Ahem… Of course, yes, but… What are you calling “A tracking URL”, and how could it be useful, especially in this case?
  7. Hello, I have a problem that for about two week, I have two mailbox (hosted by the same operator) which are flooded by spam having weird characteristics : Most of the received messages are already outdated, meaning that if I use Spamcop for reporting them, they are rejected because they are more than 2 days old, despite the fact that I submit them as soon as they are received. If I delete them from the mailbox, it happens quite often that they come back a few hours later, like if I never deleted them. All of these spams originates (apparently of course as these sender address are always fake) for me (it may be different for other users) from only 3 different mailboxes : 1 - Info@taobao.com 2 - mailer-daemon@amazon.com 3 - mailer-daemon@sourceforge.net All of this suggests that the operator itself could be involved in this situation. I'm not the only one having this problem, actually there is a large topic (38 pages so far) from the community forum of this operator where many users are complaining about the same problem : https://forum.sfr.fr/t5/votre-messagerie-sfr-mail/mail-suspect-reçu-de-ma-propre-adresse-mail-et-nombreux-spams/td-p/2164708 The hosting operator is not less than SFR, which is one of the 4 main telephony and Internet operators on the French territory. For me, this lasts since January 9th, and I got about 140 spams that way, so far. But for other users, this seems to be older. I would like to know what you think about that as I fear this is likely to defeat the Spamcop system. Regards, Gingko
  8. You are right. I tried it, it works. Although I don't understand very well why : 213.36.80.75 is really pop-fr.libertysurf.net. Gingko.
  9. Hello, I have a similar problem on this message, and all messages coming from the same provider using fetchmail. The only workaround that I found is stripping "Received" headers until the fetchmail's one, and I'm not sure that this is really welcomed .... Gingko.
×