ابحث في الدعم

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Cannot screen Junk Mail - It arrives with *MY* address as the return/reply addess.

  • 6 ردود
  • 5 have this problem
  • 2 views
  • آخر ردّ كتبه jhughey

more options

I have been getting junk mail that lists my address as the return address. Of course, you cannot screen it as SPAM/Junk, because you would screen your own mail! Moreover, cloaklinks.com is not in the header information. How do I clobber/screen these clowns?? Thanks!!! Joe

Here is some header information of a typical note: . From - Fri Jun 26 14:22:11 2015 X-Account-Key: account1 X-UIDL: 717a954a-1be6-11e5-85ef-9477f57ed7f0 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 X-Mozilla-Keys: Return-Path: <[email protected]> Received: from dnvrco-pub-iedge-vip.email.rr.com ([107.14.70.245])

         by dnvrco-fep01.email.rr.com
         (InterMail vM.8.04.01.13 201-2343-100-167-20131028) with ESMTP
         id <20150626093346.BRSF9108.dnvrco-fep01.email.rr.com@dnvrco-pub-iedge-vip.email.rr.com>
         for <[email protected]>; Fri, 26 Jun 2015 09:33:46 +0000

Return-Path: <[email protected]> Received: from [203.80.1.11] ([203.80.1.11:40661] helo=emailalert6.singtao.com) by dnvrco-iedge01 (envelope-from <[email protected]>) (ecelerity 3.5.0.35861 r(Momo-dev:tip)) with ESMTP id 98/D8-18000-A7C1D855; Fri, 26 Jun 2015 09:33:46 +0000 Received: from hkg01ww073 (unknown [203.80.1.60]) by emailalert6.singtao.com (Postfix) with SMTP id 20A681F8277 for <[email protected]>; Fri, 26 Jun 2015 17:02:26 +0800 (HKT) thread-index: AdCv7tMiw6aEmI4fQseBTcTU2BmEgg== Thread-Topic: The Standard Email News From: <[email protected]> To: <[email protected]> Subject: The Standard Email News Date: Fri, 26 Jun 2015 17:02:27 +0800 Message-ID: <123D35AF7CC543CF81789014FBE1337D@hkg01ww073> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_44E17A_01D0B031.E145D2C0" X-Mailer: Microsoft CDO for Windows 2000 Content-Class: urn:content-classes:message Importance: normal Priority: normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4913 X-RR-Connecting-IP: 107.14.64.6:25 X-Authority-Analysis: v=2.1 cv=GfKZnGnL c=1 sm=1 tr=0 a=xt6At7kyUM7QooNsL0JnaA==:117 a=xt6At7kyUM7QooNsL0JnaA==:17 a=ayC55rCoAAAA:8 a=0oj8HZZGiqAA:10 a=iCrbP50nAAAA:8 a=say5LEtv9FYA:10 a=XAFQembCKUMA:10 a=r77TgQKjGQsHNAKrUKIA:9 a=9iDbn-4jx3cA:10 a=cKsnjEOsciEA:10 a=gZbpxnkM3yUA:10 a=UoP6nO4NAAAA:8 a=LG09BQL3fjLgmR1u20YA:9 a=wPNLvfGTeEIA:10 a=B-7tEVZ4L08A:10 a=IFpbO1rE_CQA:10 a=lrFD4AenVO4A:10 a=RT5R9CO1q6QA:10 a=9bLWB3ewZYUMPXc1HI4A:9 a=PQPjo_BaagYA:10 a=XxLkWGrZPL8A:10 a=__LLkpPIc04A:10 a=m6Sgl8gyW6gA:10 X-Cloudmark-Score: 0 . This is a multi-part message in MIME format. .


=_NextPart_000_44E17A_01D0B031.E145D2C0

Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit . Hi there! How would link to hit lottery 5 times in a row in three months time? Well, you gotta check this out while this is not yet gone! www.cloaklinks.com/go/winlotto To your success, Marina Bayer _ >From : [email protected] cloaklinks.com/go/winlotto .


=_NextPart_000_44E17A_01D0B031.E145D2C0

Content-Type: text/html Content-Transfer-Encoding: 7bit . Hi there! . How would link to hit lottery 5 times in a row in three months time? . Well, you gotta check this out while this is not yet gone! . www.cloaklinks.com/go/winlotto

. To your success, Marina Bayer


_
From : [email protected]
<a href="cloaklinks.com/go/winlotto">cloaklinks.com/go/winlotto</a>

I have been getting junk mail that lists my address as the return address. Of course, you cannot screen it as SPAM/Junk, because you would screen your own mail! Moreover, cloaklinks.com is not in the header information. How do I clobber/screen these clowns?? Thanks!!! Joe Here is some header information of a typical note: . From - Fri Jun 26 14:22:11 2015 X-Account-Key: account1 X-UIDL: 717a954a-1be6-11e5-85ef-9477f57ed7f0 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 X-Mozilla-Keys: Return-Path: <[email protected]> Received: from dnvrco-pub-iedge-vip.email.rr.com ([107.14.70.245]) by dnvrco-fep01.email.rr.com (InterMail vM.8.04.01.13 201-2343-100-167-20131028) with ESMTP id <20150626093346.BRSF9108.dnvrco-fep01.email.rr.com@dnvrco-pub-iedge-vip.email.rr.com> for <[email protected]>; Fri, 26 Jun 2015 09:33:46 +0000 Return-Path: <[email protected]> Received: from [203.80.1.11] ([203.80.1.11:40661] helo=emailalert6.singtao.com) by dnvrco-iedge01 (envelope-from <[email protected]>) (ecelerity 3.5.0.35861 r(Momo-dev:tip)) with ESMTP id 98/D8-18000-A7C1D855; Fri, 26 Jun 2015 09:33:46 +0000 Received: from hkg01ww073 (unknown [203.80.1.60]) by emailalert6.singtao.com (Postfix) with SMTP id 20A681F8277 for <[email protected]>; Fri, 26 Jun 2015 17:02:26 +0800 (HKT) thread-index: AdCv7tMiw6aEmI4fQseBTcTU2BmEgg== Thread-Topic: The Standard Email News From: <[email protected]> To: <[email protected]> Subject: The Standard Email News Date: Fri, 26 Jun 2015 17:02:27 +0800 Message-ID: <123D35AF7CC543CF81789014FBE1337D@hkg01ww073> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_44E17A_01D0B031.E145D2C0" X-Mailer: Microsoft CDO for Windows 2000 Content-Class: urn:content-classes:message Importance: normal Priority: normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4913 X-RR-Connecting-IP: 107.14.64.6:25 X-Authority-Analysis: v=2.1 cv=GfKZnGnL c=1 sm=1 tr=0 a=xt6At7kyUM7QooNsL0JnaA==:117 a=xt6At7kyUM7QooNsL0JnaA==:17 a=ayC55rCoAAAA:8 a=0oj8HZZGiqAA:10 a=iCrbP50nAAAA:8 a=say5LEtv9FYA:10 a=XAFQembCKUMA:10 a=r77TgQKjGQsHNAKrUKIA:9 a=9iDbn-4jx3cA:10 a=cKsnjEOsciEA:10 a=gZbpxnkM3yUA:10 a=UoP6nO4NAAAA:8 a=LG09BQL3fjLgmR1u20YA:9 a=wPNLvfGTeEIA:10 a=B-7tEVZ4L08A:10 a=IFpbO1rE_CQA:10 a=lrFD4AenVO4A:10 a=RT5R9CO1q6QA:10 a=9bLWB3ewZYUMPXc1HI4A:9 a=PQPjo_BaagYA:10 a=XxLkWGrZPL8A:10 a=__LLkpPIc04A:10 a=m6Sgl8gyW6gA:10 X-Cloudmark-Score: 0 . This is a multi-part message in MIME format. . ------=_NextPart_000_44E17A_01D0B031.E145D2C0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit . Hi there! How would link to hit lottery 5 times in a row in three months time? Well, you gotta check this out while this is not yet gone! www.cloaklinks.com/go/winlotto To your success, Marina Bayer _ >From : [email protected] cloaklinks.com/go/winlotto . ------=_NextPart_000_44E17A_01D0B031.E145D2C0 Content-Type: text/html Content-Transfer-Encoding: 7bit . Hi there! . How would link to hit lottery 5 times in a row in three months time? . Well, you gotta check this out while this is not yet gone! . www.cloaklinks.com/go/winlotto . To your success, Marina Bayer _ <br> From : [email protected]<br><a href="cloaklinks.com/go/winlotto">cloaklinks.com/go/winlotto</a>

الحل المُختار

Thank you for the junquilla link! I shall try it out! .

Read this answer in context 👍 0

All Replies (6)

more options

Follow-up: I did a reverse look-up of two domains, hkstar.com and singtao.com, got the registrant's name and sent a note with the complaint and header. The hkstar.com bounced back, but singtao.com seems ok. Hopefully they will take action. .

more options

The Junk filter in Thunderbird doesn't take much notice of email addresses. It identifies certain tokens (words to you and me) in the message. Those tokens will be awarded values or scores according to whether they appear in Junk or Not Junk messages. So, go ahead and mark these messages as Junk and they will help build up a picture of which messages are Junk. The Junk filter won't blacklist your email address.

Why do you think the absence of "cloakinks" in the message header matters? The Junk controls look at the message text too.

The junquilla add-on gives you greater visibility of what's going on.

more options

Thank you Zenos! . Not being up to date with internet spamming, I was not aware of tokens being used for blocking, so I had reasoned only the header domains were used. I shall test this from another Email resource. . Regarding cloaklinks .... If cloaklinks.com was in the message *and* in the header, it would be a direct solicitation, and it could be easily blocked. Anticipating suggestions to block cloaklinks.com, I included the comment. . Thanks again! . Joe

more options

الحل المُختار

Thank you for the junquilla link! I shall try it out! .

more options

Thank you Christ1 for the Backscatter link. Fascinating article. Strange how the recipient's email address gets listed in the bouncing process.