Its getting worse by the day. The filters obviously are n...

[e_w]

Its getting worse by the day. The filters obviously are not working.

Please address this

Thank You 

[rstra]

The filters I created are no longer effective, I guess the spammers changed tactics. 

[sd2000]

No - I'm sorry - the spam I'm getting that you're not picking up ALL have DKIM suspect results (e.g. no parent domain identified etc.).

It seems to me your spam filters are just asleep at the switch, and need some obvious logic additions REGARDLESS of subject content.

[mdk]

@rstra -- the spammers changed tactics

For me, I have not seen any spam E-mail citing "puredigitalprods" yesterday or today.

What I did see, two days ago, was:

Return-Path: <return@mout.gmx.net>
Received: from mout.gmx.net ([75.119.128.53]) by cmsmtp with ESMTP id FOJHlxP3L13vpFOJJlbHwx; Thu, 25 Feb 2021 14:36:37 -0700
From: "Keto Burning" <keto@mout.gmx.net>
Subject: The easiest way to burn fat
MIME-Version: 1.0
List-Unsubscribe: <mailto:leave-em@oortap.tatioldana.com>
Message-Id: <LYRISqBWQTCW.14860.qBWQTCW.14860.qBWQTCW.14860.qBWQTCW-i.p-2021.01.31-10.16.49@oortap.tatioldana.com>
Date: Thu, 25 Feb 2021 22:36:32 +0100
Content-Type: multipart/alternative;

which indicates that an ID authorized to send through: mout.gmx.net ([75.119.128.53]) was used (or was abused).

I see no markers that previously have appeared: an apostrophe in the SUBJECT line, or a "Reply-To" tag.

So, it could be a different spammer, but definitely is a different tactic, by not routing through AMAZON AWS services.

[kayos]

I think they have to look at their dkim dmarc and spf records.

A quick look on mxtoolbox for Shaw shows:

DMARC Policy Not Enabled

DMARC Quarantine/Reject policy not enabled

[cynarra]

I am also receiving a lot of that K'ETO DIET spam, among others. The other type of spam that I am receiving maybe 10 a day from is a type of spam that, at first glance, looks like it is a Delivery Status Notification failure, and these always have some kind of attachment (which, of course, I never ever click on).

[mdk]

@cynarra --  The other type of spam that I am receiving maybe 10 a day from is a type of spam that, at first glance, looks like it is a Delivery Status Notification failure.

Some spammer is sending E-mail to many IDs, but has inserted your E-mail ID into the "FROM:" field.

When that E-mail cannot be delivered, some mail-server generates a "failure" message, and sends it to the ID in the "FROM:" field, which, unfortunately, is your ID.

There's almost nothing that you can do about this spammer's abuse of your ID.

The attachment probably is the E-mail sent by the spammer.

[nanuuk]

Yeah, you'd better get back to your engineers. I'm getting at least 5 spam e-mails per day and have been for weeks. Time to re-open that ticket.

[mdk]

@nanuuk --  I'm getting at least 5 spam e-mails per day and have been for weeks

There are "spammers" everywhere. Can you view the "headers" for those E-mail messages, to summarize a few fields:

1. DATE:
2. FROM:
3. SUBJECT:
4. REPLY-TO:     (if this optional tag is present)
5. the top-most RECEIVED: tag that contains "[" and "]"

and post your summary to this forum. Maybe, there is some commonality that you could create a "filter" to target.

[nanuuk]

ThephotoStick <newsletter.n6143161QF@srhgohvh.net> 

Must Read If You Store Ph0t0s & Videos On Your Compute

Content-Type: ⁨text/html;charset="utf-8"⁩

X-Date: ⁨Fri, 05 Mar 2021 21:50:46 +0100⁩

X-Cmae-Envelope: ⁨MS4xfGXRYc82/PEdaq7y0cdSz3a+Pq2JjKTeNb19YmxsEVVP+0zoZe3Hqzx7wRPowzXUiq2Njl7iamG5CdLfSZtq0/H5PZbnpjfrz1E4ye8KHEdOtClNnGgd UGPvKP+IakfZ+rfXrmqle1NOYRkXT0qXQj1JSz5g2Y1mL+TK1pNEhsz+vn0Us1WE2JHqz6Hov/IzmM9vDVOd3QHFcc/BASZMLpUzh8caoWj4ieQEYc2IGWIR lujHEDT9ENn+g25t0+5Wvyf81xQL91RYDyEW3run7+DvYwXGfcU++7nauwXM8UZs3XFimjJU0044i5RDBVsYnQ==⁩

List-Unsubscribe-Post: ⁨List-Unsubscribe=One-Click⁩

X-Reply-To: ⁨2022grahamwl-NsTQmiHhMw@mail105.suw17.mcsv.net⁩

Return-Path: ⁨<bounce.000000.citbhqwiwwnsgbecfd9jahrq.ccbkxaynhosmgoltll.29661415845.vzivntwia@mail105.suw17.mcsv.net>⁩

X-Authority-Analysis: ⁨v=2.4 cv=E4oIGYRl c=1 sm=1 tr=0 ts=604299bb cx=a_idp_d a=vYbSpmONBUqV4ndZhQXPBw==:117 a=vYbSpmONBUqV4ndZhQXPBw==:17 a=IkcTkHD0fZMA:10 a=Pf66bqbKAAAA:8 a=z9Lu3eSFqM668FEbjU4A:9 a=QEXdDO2ut3YA:10 a=abbd8gvnVAcA:10 a=sLsPS34s3P4A:10 a=8s6TgoaT_CfNbAb1TG13:22 a=LbNKXD1JbViI6tvttAC0:22 a=Z5ABNNGmrOfJ6cZ5bIyy:22 a=UDnyf2zBuKT2w-IlGP_r:22⁩

List-Unsubscribe: ⁨<http://srhgohvh.net/opt.php?d=12299&l=6&c=37839&em=55e9daa090c9d55c685266946ef46ed7>⁩

List-Unsubscribe: ⁨<mailto:listunsubscribe-wpebE2VbIJJuFlpWwAk9vZRyBQ76L5QIY@srhgohvh.net>⁩

Content-Transfer-Encoding: ⁨base64⁩

Received: ⁨from mi02-ssvc.dcs.int.inet (LHLO mi02.dcs.int.inet) (10.0.153.211) by cds235.dcs.int.inet with LMTP; Fri, 5 Mar 2021 13:51:08 -0700 (MST)⁩

Received: ⁨from mail105.suw17.mcsv.net ([54.202.88.245]) by cmsmtp with ESMTP id IHPQl1l3dxBzmIHPZliQlr; Fri, 05 Mar 2021 13:51:07 -0700⁩

⁨<ZUhJsOCJVEzoDUdbAvFDBqecEcfthCbJWFWPMHDqOz==.QTI/EjL7qL6v0yyaSktAZL==@mail105.suw17.mcsv.net>⁩

Authentication-Results: ⁨mi02.dcs.int.inet; dmarc=none header.from=srhgohvh.net⁩

Content-Type: ⁨text/html;charset="utf-8"⁩

X-Date: ⁨Fri, 05 Mar 2021 21:28:41 +0100⁩

X-Cmae-Envelope: ⁨MS4xfKN2vf1ZGo+mEzTiglW+VblrpUg96cYy6UQj5BYSYr1kx/V9JY5G61b9dpK5G7dUsu1X6AuedDdgzj1a/ZZqbLvU8dulmC2i44XZRnhx/xT2idBpmYNe 8w1Ofn4gu2M5pXFYNAKNEfvl3BuQZ1BYf7VFlWwRCwqBoJCToCFZqtqPYbiveqaJwCu3XwDktdXg7KO7xF7s6Iq1NMEwpN3basLBWRmVJQpScha3XzSJE0ke x/giffXshZPbTSjKWrm8/U1fd/8RYVyMQAds5kNVUCJGKQHznVTeavb+17ZYU521E4/JFINkwhunFODW8t3NRw==⁩

List-Unsubscribe-Post: ⁨List-Unsubscribe=One-Click⁩

X-Reply-To: ⁨2022grahamwl-OAz1f00l6Y@mail105.suw17.mcsv.net⁩

Return-Path: ⁨<bounce.000000.4ncmfkau5agmmzrdjlxfhtbo.petnlpvpvfljpyfqhz.81341765000.ccwyohtto@mail105.suw17.mcsv.net>⁩

X-Authority-Analysis: ⁨v=2.4 cv=fY5od2cF c=1 sm=1 tr=0 ts=6042949d cx=a_idp_d a=79nwDagCJKUq0mebkWEr2g==:117 a=79nwDagCJKUq0mebkWEr2g==:17 a=IkcTkHD0fZMA:10 a=amXqa3jDAAAA:8 a=z9Lu3eSFqM668FEbjU4A:9 a=QEXdDO2ut3YA:10 a=pg4i7KqxNBMA:10 a=QB0s8At3IeIA:10 a=K5hc9uaxetGkYD80XIOn:22 a=LbNKXD1JbViI6tvttAC0:22 a=PyhAtbaPCMY_JEpdngpS:22 a=p-dnK0njbqwfn1k4-x12:22 a=MURpYVOlrLSSKvKaDb7l:22 a=1ZVMqjDdYOxySbRdgNIS:22⁩

List-Unsubscribe: ⁨<http://ppxqnzgd.net/opt.php?d=11512&l=6&c=37839&em=55e9daa090c9d55c685266946ef46ed7>⁩

List-Unsubscribe: ⁨<mailto:listunsubscribe-lP2hu5n85cSyXPrXMHqunOTBfRYI9NBdt@ppxqnzgd.net>⁩

Content-Transfer-Encoding: ⁨base64⁩

Received: ⁨from mi01-ssvc.dcs.int.inet (LHLO mi01.dcs.int.inet) (10.0.153.210) by cds235.dcs.int.inet with LMTP; Fri, 5 Mar 2021 13:29:19 -0700 (MST)⁩

Received: ⁨from mail105.suw17.mcsv.net ([34.215.173.215]) by cmsmtp with ESMTP id IH42lz1I113vpIH4JlXJlO; Fri, 05 Mar 2021 13:29:16 -0700⁩

⁨<LdBVwMbaqIiXNuABQhuMctQhDSxvwCoSEunXiEgGYe==.XPQ/esX3vgSe1QQkCeyVbv==@mail105.suw17.mcsv.net>⁩

Authentication-Results: ⁨mi01.dcs.int.inet; dmarc=none header.from=ppxqnzgd.net⁩

Content-Type: ⁨text/html;charset="utf-8"⁩

Authentication-Results: ⁨mi01.dcs.int.inet; dmarc=none header.from=gbtzqqqk.net⁩

X-Cmae-Envelope: ⁨MS4xfFlzcqyd+7+q2Xq4V4RhM0QI0JMnTeTJzwLadSBQPhI04CvGQDJqJ0+ZbbG+Sd8jUnUAZplJYHwrUOQDoP0Da73jGIgLvKRKNf0sA/xwujbU+5lryNPo ZKrAurbjP0VHla7ZH+Jeq9awZj3ReprpGpQLRhAhBQbLKdrfMVp5w/zByVD3hGRsU2uXpin//f6hxdFtAXYJsjk/gbFptSHEI8U=⁩

List-Unsubscribe-Post: ⁨List-Unsubscribe=One-Click⁩

X-Reply-To: ⁨2022grahamwl-DEUQZF8Rd9@stereophile.com⁩

Return-Path: ⁨<bounce@qdxre.kmodinbmo.uk.com>⁩

X-Authority-Analysis: ⁨v=2.4 cv=fY5od2cF c=1 sm=1 tr=0 ts=60418197 cx=a_idp_d a=5goRxurH23rw1S8pd8vmkQ==:117 a=5goRxurH23rw1S8pd8vmkQ==:17 a=IkcTkHD0fZMA:10 a=P-wJZCCjAAAA:8 a=z9Lu3eSFqM668FEbjU4A:9 a=QEXdDO2ut3YA:10 a=BFVY6Nhl5sAA:10 a=RokNgvDMWDQA:10 a=bipB8lJpqx8AkCjXrzan:22 a=LbNKXD1JbViI6tvttAC0:22 a=Z5ABNNGmrOfJ6cZ5bIyy:22 a=SsAZrZ5W_gNWK9tOzrEV:22⁩

List-Unsubscribe: ⁨<http://gbtzqqqk.net/opt.php?d=7465&l=6&c=37839&em=55e9daa090c9d55c685266946ef46ed7>⁩

List-Unsubscribe: ⁨<mailto:listunsubscribe-ajqmlJ4suLFYx6wtXkGvyV3JPNZLqVSbu@gbtzqqqk.net>⁩

Content-Transfer-Encoding: ⁨base64⁩

Received: ⁨from mi01-ssvc.dcs.int.inet (LHLO mi01.dcs.int.inet) (10.0.153.210) by cds235.dcs.int.inet with LMTP; Thu, 4 Mar 2021 17:55:52 -0700 (MST)⁩

Received: ⁨from stereophile.com ([18.185.126.14]) by cmsmtp with ESMTP id HykelsVAq13vpHykqlRQGC; Thu, 04 Mar 2021 17:55:51 -0700⁩

⁨<CvoxyJvKRjiIxldtgRyYtKSLejGVxsRkxBHBaeloWe==.CKa/CgF4XWyTT8sdtV2EyT==@stereophile.com>⁩

Content-Type: ⁨text/html;charset="utf-8"⁩

Authentication-Results: ⁨mi07.dcs.int.inet; dmarc=none header.from=idlwcuve.net⁩

X-Cmae-Envelope: ⁨MS4xfFhObX4BfDrTPBthJEydm/d/2KyM1fhIEKP67ph/jhuCpwRfEVRUUGeFtm54+dIAwo1uJ/JIIYkGtqtyVWRhqjG62UvEXBgEOOG9bQORsHUfDflJRRq5 xQI8pUAMtMA4KAnDmx7Zua2C4MCKrZOeWpa+8AFIm6bzFwY674FqeNE3RV069YsAreDT6Bk0EI4hzJ8Mnm3WeKEM5CNP/ZONhPg=⁩

List-Unsubscribe-Post: ⁨List-Unsubscribe=One-Click⁩

X-Reply-To: ⁨2022grahamwl-bpijvLMxuH@stereophile.com⁩

Return-Path: ⁨<bounce@cuexq.kmodinbmo.uk.com>⁩

X-Authority-Analysis: ⁨v=2.4 cv=BJl2EHcG c=1 sm=1 tr=0 ts=60416bde cx=a_idp_d a=nEAHK4W169+Bt5P0shbc7w==:117 a=nEAHK4W169+Bt5P0shbc7w==:17 a=IkcTkHD0fZMA:10 a=VFpwFS1pAAAA:8 a=z9Lu3eSFqM668FEbjU4A:9 a=QEXdDO2ut3YA:10 a=oPGv9VohcgkA:10 a=xZd3BjHTZ4cA:10 a=ehXq_vTCWqg895ovUvBL:22 a=LbNKXD1JbViI6tvttAC0:22 a=Z5ABNNGmrOfJ6cZ5bIyy:22 a=jd6J4Gguk5HxikPWLKER:22⁩

List-Unsubscribe: ⁨<http://idlwcuve.net/opt.php?d=5440&l=6&c=37839&em=55e9daa090c9d55c685266946ef46ed7>⁩

List-Unsubscribe: ⁨<mailto:listunsubscribe-fUH5fLnOm0bJ7QJBwkye27Sy8oJyQ99HS@idlwcuve.net>⁩

Content-Transfer-Encoding: ⁨base64⁩

Received: ⁨from mi07-ssvc.dcs.int.inet (LHLO mi07.dcs.int.inet) (10.0.141.220) by cds235.dcs.int.inet with LMTP; Thu, 4 Mar 2021 16:23:12 -0700 (MST)⁩

Received: ⁨from stereophile.com ([34.221.223.117]) by cmsmtp with ESMTP id HxItlOhV6nUUHHxJ5luraR; Thu, 04 Mar 2021 16:23:10 -0700⁩

⁨<MBdcfFmXtAfBDZlllOMmYVhNoqPuozKqOaSvzWBnZY==.buA/EFMptCweayYMi844KE==@stereophile.com>⁩

Content-Type: ⁨text/html;charset="utf-8"⁩

Authentication-Results: ⁨mi06.dcs.int.inet; dmarc=none header.from=sytzgvvq.net⁩

X-Cmae-Envelope: ⁨MS4xfP/cl86D50CtfTxsZb+BLG4ENoPeFxo/1+yGnmX6gAoBp9MT01FI2xHMvTaI6ugb/KtiH5paMYC9dne3QhHgDricUtH/spEFquQsA6yXIgvhYvNSCbK8 sLR/hqvLLyKGD9/yHMLojeFuDkb/btCxRCd/5XWH30nX4c5Rna91YlmB2TYZOYdCE47GqtTOQyIpUg==⁩

List-Unsubscribe-Post: ⁨List-Unsubscribe=One-Click⁩

X-Reply-To: ⁨2022grahamwl-tMf8RkaJO2@softdroid.net⁩

Return-Path: ⁨<bounce@kebru.kmodinbmo.uk.com>⁩

X-Authority-Analysis: ⁨v=2.4 cv=HNgGqqhv c=1 sm=1 tr=0 ts=604155b2 cx=a_idp_d a=Dy0+tzRyJ7B5JAWGp4MItw==:117 a=Dy0+tzRyJ7B5JAWGp4MItw==:17 a=IkcTkHD0fZMA:10 a=QIj2IsvjcBWkWszWGB8A:9 a=QEXdDO2ut3YA:10 a=pHzHmUro8NiASowvMSCR:22 a=6VlIyEUom7LUIeUMNQJH:22⁩

List-Unsubscribe: ⁨<http://sytzgvvq.net/opt.php?d=4891&l=6&c=37839&em=55e9daa090c9d55c685266946ef46ed7>⁩

List-Unsubscribe: ⁨<mailto:listunsubscribe-oHefb6Wj81aSghWCCfQf0BkSfkO6UvZ0f@sytzgvvq.net>⁩

Content-Transfer-Encoding: ⁨7bit⁩

Received: ⁨from mi06-ssvc.dcs.int.inet (LHLO mi06.dcs.int.inet) (10.0.141.211) by cds235.dcs.int.inet with LMTP; Thu, 4 Mar 2021 14:48:35 -0700 (MST)⁩

Received: ⁨from softdroid.net ([35.156.46.25]) by cmsmtp with ESMTP id HvpLlNZWn1DC6HvpYlBMUr; Thu, 04 Mar 2021 14:48:33 -0700⁩

⁨<UuhAEqBbDjYcCPClNTfAZcoheVaGwPRMTwociKxTmz==.cdA/B3Drb7LtOvuIml20ox==@softdroid.net>⁩