chinese spam from @qq.com -- no body text, receipt requested

General discussions and other topics.
5 posts Page 1 of 1
by ankh » Wed Apr 25, 2018 2:39 pm
I've blacklisted @qq.com so hope not to see any more of the current flood I've been getting from them.

But some questions. This is all apparently Chinese language spam.

No body text -- so it gets rejected for that reason if I try to report it to Spamcop. Any way to fix that?
(Spamcop's not much help)

There is often a return receipt request, and sometimes a malware attachment, on the email.
So I'd like to be able to report it so Spamcop will add it to their blocklist..


I understand Sonic uses Spamcop's blocklist.
by ankh » Thu Apr 26, 2018 8:51 am
Arrrrrgh. "@qq.com" spam is getting around my attempt to block it.
And they've figured out how to format the spam so it can't be reported successfully to Spamcop too.
And they're including return receipt requests and occasional malware.

The subject lines all contain numeric strings that include: 8点com

I've added that string to the blacklist, hoping the partial match is sufficient.
by ankh » Thu Apr 26, 2018 10:56 am
No luck, a lot of it is still getting through, though some is being caught and going into graymail.
The spammer is playing some kind of tricks with the spam to evade the blacklist.
The numeric strings are different for each item of spam.

I've asked Support; got a canned response on first go-round but am persisting.

This is the latest -- all the content is in the Subject: line


14哈喽!现邀您领188圆 请在【336478点com】注册VIP 详情企鹅专员【1991900074】咨询VIP周周领工资 俸禄月月拿 天天都有红包雨 实力平台 出款安全保障

A Google search for 点com gets 13,300,000 results.
by miken » Thu Apr 26, 2018 12:56 pm
I would try modifying the scores for foreign characters in Membertools.

Email --> Spam Filtering --> Modify Scores

You can just change the score for these two rules to something ridiculous like 50:

CHARSET_FARAWAY
CHARSET_FARAWAY_HEADER

If you still continue to see those messages come in, let us know and I'll see if there's any further help we can provide.
Mike N.
Development Trainer
Sonic
by ankh » Thu Apr 26, 2018 1:08 pm
Done, and thank you. I did not know about that setting.
5 posts Page 1 of 1

Who is online

In total there are 33 users online :: 0 registered, 0 hidden and 33 guests (based on users active over the past 5 minutes)
Most users ever online was 999 on Mon May 10, 2021 1:02 am

Users browsing this forum: No registered users and 33 guests