Observer
•
16 Messages
How to filter spam flooded with special characters
partial header ATT spam filters not catching:
From: "A‎‎‎c‎‎e ‎‎H‎‎‎‎a‎‎‎‎r‎‎‎‎d‎‎w‎‎‎‎a‎‎‎‎r‎‎‎‎e",
<[email scrubbed]>
To: "[email scrubbed]" <[email scrubbed]>
X-Feedback: EkrWsAJnEaJQAkrgWiFISJQcPSAFhVeZBDIhknzwewUDiwcdqu-6401892954236820098634371471309640187023PMShQLVhTNEetLdawBrSpdfjCbyVYcSuztJeavABJiEdrhfowv-1257581623551789957697165173074651792277 AUGYwBfGAraRPHJHpXjneklfZeffrIkcegjvBNjSfhFyMLaXYz-5886731528044090288733732488922040214316PwdTeQIFIfRkJCvpWePUuMgaYAhDvLBfqUZAPwsoJdxdoeBBpy-8989963023942641713728287483771197374951 WaUrTXJVMCCQghOuJkKDbDQhllRjFkyVayIpPdBCwOzrjXuwJQ-8022175167273782008804522520043816853140
X-zccYkMvzq: 5717928407189216059395471321691050253478kSzkohARvlDopxhBEtguYUhmDyREdsyckQdSrVQKHceVQKmSgJ-7127682298097114748191302428520236837810-2188342263749971917636957792375526569229JIrKgYQMBCuRWWgXnWoGJSLYxpwGxuNFmOmtwhZyQcRxLnDELF-8581610742784593657615376648189149967949 -1638609255396964540847024314082397230591yrpdabcmmeQTggUJioyDxHvciAJoCuwlffLkaeGFhKowuURDlZ-6421067091179683292583077848991553346550
Subject: Y‎‎‎o‎‎‎u h‎‎a‎‎‎ve w‎‎‎o‎‎‎n 1‎‎7‎‎‎0 P‎‎‎i‎‎‎e‎‎‎c‎‎‎e S‎‎‎t‎‎‎a‎‎nl‎‎‎e‎‎‎y T‎‎‎o‎‎‎ol S‎‎‎e‎‎t
X-KLSOxHtuP: 1913143325550265067806798908737753312397eislJbXroKOPzfYnxmgqNjshPFICYAXIniksdaFgUlTSequqjG-1175692774124790562809095209069850625717-0902189801766402490099751450329577858761
Content-Type: multipart/alternative; boundary=tdGK7A1VUciGxwWGUGfCGKUa0lr5OaxEY6G9vZzXNxTupKuFbSTqsZg3iWB; charset=UTF-8
X-gKJIoEolN: 5542066122255558050054645443139674471541QxOTrxekyJWCkYUUjivYfgtgbFiyfoYfDkalgmbuLOLbXSGPHt-2110341503764906111650056460072165987496-3453701179686739152083654102149217771010
X-igDfadMli: 9716764338904559524546663148777224828655YVUGzTHRNKYpUntcNjjkIMaGyNBJJLzbEGstnQYvrtEusiNvTR
Message-ID:
<[email scrubbed]>
Date: Tue, 16 Aug 2022 17:22:56 +0000
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
MIME-Version: 1.0
X-MS-Office365-Filtering-Correlation-Id: 98dbb1d3-9267-40f4-ae0f-08da7fabf62e
X-MS-TrafficTypeDiagnostic: HKAPR01MB3617:EE_
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
Hu3ZVOFk6NxhnWIwda7mmnIeke1v351HpOxxF2eamyjwbcd8ct1BX0nTyZFJ+CBYRs4t62O0NWyN7bPgHu7cgIIUB6Rowmg6L1UTuhQshA5mcFmuWZfNJyHtoxuQfXhvfk5dcfE8xyUfuKcE9BdhSqVg4gqq99B5+M+Gpi7yi1i7P7ODo9YzIeWybDef7QvHJF7vojGPQmk+KeVa18aP/Blau16JZSvxmeS7mjy6D3QnXQV28OMZY1Lu6vIkwuSoBmNhqMrYALZ818RVDxTPasTdut0fuRD2L+3/M5VMUEtBVShLueGpGzLdBiYzptl7wSSY0gcAs5IfkwgL4b5xHBJ2POfNFeH5cnhDp5YrRvQBYJ4+KmSxkmH7/UtEfu6xpb8LotOa4U0WWYEzo0PHdhHdgYrP9RhOvagLlOq7r8gkXhBdFtstYsJKUMGPUHZ5bkfItXPyKRed19sgMtRz5uiL80N044P4cOg7KegcCXXZQG1zysgrTABn9YhjmbD9wssH3AMO6UwuSuIqr/YwXC9AOLEG2dXZbQJ8RJ3+kADB8obXQ5IxGUn6iQ8zuSOx7TSDY1sTGsLFfhpRdUH7Opgd0GOkRYmjrMbE9T1gw4KPiow2Oqp+1aZy6yKlVNrJWg/OZacRMm0ncapXF5zZ60z4YBmTbP39JaM49eeGEiM=
X-Forefront-Antispam-Report:
CIP:168.138.77.121;CTRY:CA;LANG:pt;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:tryfander.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230016)(39860400002)(396003)(136003)(376002)(346002)(36840700001)(40470700004)(46966006)(31696002)(82740400003)(36860700001)(8936002)(40460700003)(83170400001)(81166007)(70206006)(70586007)(316002)(42186006)(6916009)(40480700001)(2906002)(786003)(5660300002)(33964004)(30864003)(9686003)(26005)(41300700001)(41320700001)(336012)(47076005)(186003)(82310400005)(42882007)(478600001)(31686004)(88522003)(101270200001)(36900700001)(95630200002);DIR:OUT;SFP:1102;
X-OriginatorOrg: cuenti.bbaso.online
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Aug 2022 17:22:56.7580
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 98dbb1d3-9267-40f4-ae0f-08da7fabf62e
X-MS-Exchange-CrossTenant-Id: 3158ed28-5b5b-486b-af23-d7578bde3ce5
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3158ed28-5b5b-486b-af23-d7578bde3ce5;Ip=[168.138.77.121];Helo=[tryfander.com]
X-MS-Exchange-CrossTenant-AuthSource:
TYZAPC01FT022.eop-APC01.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HKAPR01MB3617
Content-Length: 16470
tonydi
ACE - Guru
•
9.9K Messages
10 months ago
Take a look at THIS post from @wandajothomas on how to filter these.
0
0
lberkowitz
Observer
•
16 Messages
10 months ago
This is an example of the From: in a recent spam. It's more involved than the issue the link mentioned (which I have also seen).
From: "=?UTF-8?Q?=47=E2=80=8E=E2=80=8E=E2=80=8E=E2=80=8E=72=E2=80=8E=E2=80=8E=E2=80=8E=61=E2=80=8E=E2=80=8E=E2=80=8E=6E=E2=80=8E=E2=80=8E=E2=80=8E=64=20=46=E2=80=8E=E2=80=8E=E2=80=8E=72=E2=80=8E=E2=80=8E=E2=80=8E=6F=E2=80=8E=E2=80=8E=E2=80=8E=74=E2=80=8E=E2=80=8E=E2=80=8E=75=E2=80=8E=E2=80=8E=E2=80=8E=6E=E2=80=8E=E2=80=8E=E2=80=8E=65=20=43=E2=80=8E=E2=80=8E=E2=80=8E=41=E2=80=8E=E2=80=8E=E2=80=8E=53=E2=80=8E=E2=80=8E=49=E2=80=8E=E2=80=8E=E2=80=8E=4E=E2=80=8E=E2=80=8E=4F?=", <[email scrubbed]>(edited)
0
0
tonydi
ACE - Guru
•
9.9K Messages
10 months ago
Yeah, so just plug that into the filter. 😂
Wow, Spammers 12978479590, Users 3. Hard to win against these guys.
0
0
lberkowitz
Observer
•
16 Messages
10 months ago
Absolutely. I am spending an absurd amount of time trying to filter this crap out manually before it hits my Eudora inbox. AT&T Community does not give enough options if you select "Block senders" or "Filter messages like this". Totally inadequate for the task.
0
0
tonydi
ACE - Guru
•
9.9K Messages
10 months ago
Wow, Eudora. Best email client ever. I'd still be using it had one of the last devs working on it added some encoding support.
Lots of things on Yahoo are totally inadequate.
0
0
lberkowitz
Observer
•
16 Messages
10 months ago
I love Eudora; have been using it since around 2004. There is some support (search "SourceForge Hermes downloads") and a few plug-ins that have made it worth keeping.
0