Blacklist SPAM filter not effective
I'm getting around 50-100 spam emails everyday from what I believe are 2-3 companies pumping out multiple emails with different topics. I have tried to individually mark them as junk, but it seems that they've configured their email to always slightly change the delivery address to overcome any junk mail tagging. I have tried to blacklist using root terms within their email address but still with no apparent success. I have raised the Spam Auto-Delete Threshold from 4, to 3 and now to 2 and it hasn't made any difference. A few still get blacklisted / removed which was good, but cPanel seems to only delete once I enter Outlook, brings them up and then removes them in front of my eyes. So when I log into Outlook, I see all these SPAM emails initially and then a couple disappear. When I look at my emails on my phone, they are not removed, so only some are removed but only once I have opened Outlook. I would have thought a blacklisting process would delete them before they get passed on to me through my web, Outlook or mobile phone email accounts. Hence, it appears to be a very useless blacklisting process. These SPAM emails have essentially destroyed any proper use of my email address and cPanel doesn't appear to be effective at controlling them. Does anyone have any recommendations to effectively delete these? I have cut and paste some property details from one of the junk emails as below. Any suggestions would be appreciated.
******************************************
Example of one spam email (property details):
@bounce.your.basictradingtips.com>
Envelope-to: gary.finke@aromatrix.com.au
Delivery-date: Tue, 26 Dec 2023 19:21:54 -0600
Received: from mta.your.basictradingtips.com ([128.245.242.120]:56239)
by gator4052.hostgator.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <bounce-1558_HTML-10856417-8284-546000543-0@bounce.your.basictradingtips.com>)
id 1rIIcM-000HO5-1Z
for gary.finke@aromatrix.com.au;
Tue, 26 Dec 2023 19:21:54 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=13dkim1; d=your.basictradingtips.com;
h=From:To:Subject:Date:List-Unsubscribe:List-Unsubscribe-Post:MIME-Version:
Reply-To:List-ID:X-CSA-Complaints:Message-ID:Content-Type;
i=email@your.basictradingtips.com;
bh=h+D2SeBfXh2P/cIt037VKOd17oVpf6p/AUq6PkDWj3A=;
b=ga27mVYqOFzNRMpnUztKPWeKdtjKT8YM/BzwTCG5ohQmo1d/EIadHsH1mtSHS7lO+so2qFT68r+p
L/CR3d8qtRvE31Hw4mk85UpZeT0RCdmrvzU57LhO1TmU86gHSaV+aXUVeA8RqHupCmelohz34Ggb
CdQT1cPSUpDEiSH0O20PqH+8cCMM5cLTh/YH4MgDy2zatUagjYHFjO8Gjg0sTg0/BJ4FMwauDcSy
Su7sX2X5HA1JNmzEqjdz6qPCcTQ4EjO8+jI/Nt0CjXdQb11dq0OFqO+wPa7lod90yAtIk/heI3ea
S4yDxIMdMNg8biU3bNBxFYWV+Ua1LhBSEBpSWA==
Received: by mta.your.basictradingtips.com id hhdu342fmd46 for <gary.finke@aromatrix.com.au>; Wed, 27 Dec 2023 01:21:42 +0000 (envelope-from <bounce-1558_HTML-10856417-8284-546000543-0@bounce.your.basictradingtips.com>)
From: "David Smith | Basic Trading" <email@your.basictradingtips.com>
To: <gary.finke@aromatrix.com.au>
Subject: =?UTF-8?B?VGhlcmXigJlzIHJldm9sdXRpb25hcnkgdGVjaCBoaWRkZW4gaW4g?=
=?UTF-8?B?dGhlIGRlc2VydA==?=
Date: Tue, 26 Dec 2023 19:21:42 -0600
List-Unsubscribe: <https://click.your.basictradingtips.com/subscription_center.aspx?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJtaWQiOiI1NDYwMDA1NDMiLCJzIjoiMTA4NTY0MTciLCJsaWQiOiIxNTU4IiwiaiI6IjgyODQiLCJqYiI6IjAiLCJkIjoiMTMwMDAzIn0.SB7S_HCNnSzjzpD93DvF4kxnPAMYdtDHa33kgZtp9bo>, <mailto:leave-fd181575706c6b2531492c-fe5f15707d6102797413-ff291c727d60-fe3411747364047d701073-ffcf14@leave.your.basictradingtips.com>
List-Unsubscribe-Post: List-Unsubscribe=One-Click
x-CSA-Compliance-Source: SFMC
MIME-Version: 1.0
Reply-To: "BasicTradingTips.com" <reply-ff291c727d60-1558_HTML-10856417-546000543-0@your.basictradingtips.com>
List-ID: <546000297.xt.local>
X-CSA-Complaints: csa-complaints@eco.de
X-SFMC-Stack: 13
x-job: 546000543_8284
Message-ID: <98a18bad-e6eb-4acd-bd10-4f45b4bc88cd@iad4s13mta744.xt.local>
Content-Type: multipart/alternative;
boundary="VfQZ9iR0j931=_?:"
X-Spam-Status: No, score=0.2
X-Spam-Score: 2
X-Spam-Bar: /
X-Spam-Flag: NO
-
Hey there! If the emails are being removed only after you open the Outlook client, that is something with Outlook and not with cPanel, as we don't have any control over how Outlook handles the messages.
How are you marking them as spam on your end?
0 -
I've got my hosting with cPanel so if I create a blacklist here, then I assume cPanel should take the first action of deleting the SPAM. I thought Outlook and my phone email feed off of cPanel? I've now just received a SPAM email from the following (refer properties extract below), however I had already created a blacklist within cPanel's Boxtrapper for this as "+\@bounce\.is\.globalwealthtidings\.com". Since most of these SPAM have the "@bounce" as common in their email path, I also have added "+\@bounce" to the blacklist, but obviously this is not doing any trapping. So I'm keen to understand why this hasn't worked? Same for many other SPAM emails. I can post my complete blacklist if you would like to see? Keen to get your thoughts on this (have I created the correct blacklist email path or do I need to modify)?
PS, I had also previously created a blacklist in Outlook, so some that get through cPanel I assume are being deleted through Outlook. But again, it doesn't answer my query above.
***********************
Return-Path: <bounce-1439_HTML-13417685-8445-546000540-0@bounce.is.globalwealthtidings.com>
Delivered-To: gary.finke@aromatrix.com.au
Received: from gator4052.hostgator.com
by gator4052.hostgator.com with LMTP
id QN+WNSevjmX+UgAAWaG8ow
(envelope-from <bounce-1439_HTML-13417685-8445-546000540-0@bounce.is.globalwealthtidings.com>)
for <gary.finke@aromatrix.com.au>; Fri, 29 Dec 2023 05:36:07 -0600
Return-path: <bounce-1439_HTML-13417685-8445-546000540-0@bounce.is.globalwealthtidings.com>
Envelope-to: gary.finke@aromatrix.com.au
Delivery-date: Fri, 29 Dec 2023 05:36:07 -0600
Received: from mta.is.globalwealthtidings.com ([128.245.242.119]:32774)
by gator4052.hostgator.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <bounce-1439_HTML-13417685-8445-546000540-0@bounce.is.globalwealthtidings.com>)
id 1rJB9r-000KVQ-1e
for gary.finke@aromatrix.com.au;
Fri, 29 Dec 2023 05:36:07 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=13dkim1; d=is.globalwealthtidings.com;
h=From:To:Subject:Date:List-Unsubscribe:List-Unsubscribe-Post:MIME-Version:
Reply-To:List-ID:X-CSA-Complaints:Message-ID:Content-Type;
i=global@is.globalwealthtidings.com;
bh=+ni3c/GMd+Zx1gKehStLdfPFsmTOKTinU6UZSyx/Lpc=;
b=LstI5ckWWlopyQtClccOfmIKQHdkgAiWa0JclsjCmK+BGliLG49b7koOfgtxzyYjZ8CA3FoTqodt
QwFmDPo+co2cZq2bOi586pfmQ9pA6JT4QPBEqZ34VjtzyNyloTDRpp/Ds8wenT1+j7yT2elz8qJT
cNql+bf/GHOJqXJjN+1YbfWwv8tdVHNp14d68YvZWOAPWSml85kfo+dya4B/9htZcpDe3YNaizwA
nTaQWPIXnFT77yai4qsZ/UFpEXAmchdCqrc4zuqoXGXp6MRjFOm4XyoBzgQkG2zu0rDHZ0PZ+wlF
3N7+nPDd2SUp4PBcObN3CoOfRiiwIhv5026h/Q==
Received: by mta.is.globalwealthtidings.com id hhqnie2fmd43 for <gary.finke@aromatrix.com.au>; Fri, 29 Dec 2023 11:35:55 +0000 (envelope-from <bounce-1439_HTML-13417685-8445-546000540-0@bounce.is.globalwealthtidings.com>)
From: "Chris Davis from Wealth Tidings" <global@is.globalwealthtidings.com>
To: <gary.finke@aromatrix.com.au>
Subject: These 2 Dividend Stocks Pay Every Week
Date: Fri, 29 Dec 2023 05:35:55 -0600
List-Unsubscribe: <https://click.is.globalwealthtidings.com/subscription_center.aspx?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJtaWQiOiI1NDYwMDA1NDAiLCJzIjoiMTM0MTc2ODUiLCJsaWQiOiIxNDM5IiwiaiI6Ijg0NDUiLCJqYiI6IjAiLCJkIjoiMTMwMDAyIn0.j7rTnCfWWT9f1wYYV8xJC00J9rKQFt4-k_ToA2u-83M>, <mailto:leave-fd1a1574766d6b2531492c-fe5c15737165037b7d11-ff2a1c747161-fe3711747364047d701070-ffcf14@leave.is.globalwealthtidings.com>
List-Unsubscribe-Post: List-Unsubscribe=One-Click
x-CSA-Compliance-Source: SFMC
MIME-Version: 1.0
Reply-To: "GlobalWealthTidings.com" <reply-ff2a1c747161-1439_HTML-13417685-546000540-0@is.globalwealthtidings.com>
List-ID: <546000297.xt.local>
X-CSA-Complaints: csa-complaints@eco.de
X-SFMC-Stack: 13
x-job: 546000540_8445
Message-ID: <19a8d351-5c01-45fc-b84a-a7be83a1300f@iad4s13mta748.xt.local>
Content-Type: multipart/alternative;
boundary="Joh2F408iAlB=_?:"
X-Spam-Status: No, score=0.2
X-Spam-Score: 2
X-Spam-Bar: /
X-Spam-Flag: NO0 -
Yes, I would expect the blacklist to be processed, but I would expect that to happen before you open Outlook. There shouldn't be any behavior that changes based on your filters after Outlook is opened.
This sounds like something we may need to see a ticket about, so if your license is purchased through us feel free to reach out so we can do some additional testing!
0
Please sign in to leave a comment.
Comments
3 comments