MIG Posted June 10, 2019 Share Posted June 10, 2019 https://www.spamcop.net/sc?id=z6553438559z3bce578c31b64b0feee590952682dcb9z Can't work this out, have not escalated any spam queries to email-abuse@amazon.com, is it legit or is it spam? 🙏G🦗H Link to comment Share on other sites More sharing options...
petzl Posted June 10, 2019 Share Posted June 10, 2019 44 minutes ago, MIG said: https://www.spamcop.net/sc?id=z6553438559z3bce578c31b64b0feee590952682dcb9z Can't work this out, have not escalated any spam queries to email-abuse@amazon.com, is it legit or is it spam? 🙏G🦗H fake bounce to you spammer has you as return address? Link to comment Share on other sites More sharing options...
MIG Posted June 10, 2019 Author Share Posted June 10, 2019 6 hours ago, petzl said: fake bounce to you spammer has you as return address? Hey Petzl, Bc, this one has me flumoxed, can you see that from the data (I can't) or is "fake bounce" a theory? 🙏G🦗H Link to comment Share on other sites More sharing options...
petzl Posted June 10, 2019 Share Posted June 10, 2019 11 hours ago, MIG said: Hey Petzl, Bc, this one has me flumoxed, can you see that from the data (I can't) or is "fake bounce" a theory? 🙏G🦗H Doesn't pass the test as a mail server and history of IP shows two reported fake bounces and a fair bit of spam over 90 days Link to comment Share on other sites More sharing options...
RobiBue Posted June 11, 2019 Share Posted June 11, 2019 22 hours ago, MIG said: https://www.spamcop.net/sc?id=z6553438559z3bce578c31b64b0feee590952682dcb9z Can't work this out, have not escalated any spam queries to email-abuse@amazon.com, is it legit or is it spam? 🙏G🦗H 1/2 way agree wit Petzl 😉 fake bounce: no, it's a real bounce spammer has you as return address: yes. That's why you're receiving the bounce 😞 The address that the spammer sent the spam to, is invalid (either never existed or got removed from usage) and since your address was the return address (From:) ... another reason to hate spammers... but no point in submitting that one, as the owner is legit... they just replied to you to let you know that "your" mail couldn't be delivered... that's another reason why spamcop goes after the Received: headers and not the From: email addresses 😉 Link to comment Share on other sites More sharing options...
petzl Posted June 11, 2019 Share Posted June 11, 2019 1 hour ago, RobiBue said: 1/2 way agree wit Petzl 😉 fake bounce: no, it's a real bounce spammer has you as return address: yes. That's why you're receiving the bounce 😞 The address that the spammer sent the spam to, is invalid (either never existed or got removed from usage) and since your address was the return address (From:) ... another reason to hate spammers... but no point in submitting that one, as the owner is legit... they just replied to you to let you know that "your" mail couldn't be delivered... that's another reason why spamcop goes after the Received: headers and not the From: email addresses 😉 found it but it's still spam using a email account a8-31.smtp-out.amazonses.com Link to comment Share on other sites More sharing options...
lisati Posted June 11, 2019 Share Posted June 11, 2019 Sounds a bit like "backscatter" where a provider has the "wrong" email address to use when sending out a bounce or other form of non-delivery report. Some see it as spam, some don't. Unfortunately there's often no easy and reliable way for a provider to determine from the email headers if the return address is legit without the risk of annoying and/or inconveniencing innocent bystanders. Link to comment Share on other sites More sharing options...
gnarlymarley Posted June 19, 2019 Share Posted June 19, 2019 On 6/10/2019 at 11:08 PM, lisati said: Sounds a bit like "backscatter" where a provider has the "wrong" email address to use when sending out a bounce or other form of non-delivery report. MIG, This is one that does nearly sound legitimate and had me going for about 10 days now, but I think I have cracked it. It appears that the bounce should be coming from 162.255.118.61 or 162.255.118.62 and not 54.240.8.31. The MX record for client76701.host appears to be namecheap.com, not amazon. The more I look at this, the more I think backscatter Link to comment Share on other sites More sharing options...
.thumb.jpg.86812d1032bf875715674c9bc1d0eaec.jpg)
Recommended Posts
Archived
This topic is now archived and is closed to further replies.