Welcome to Comcast Help & Support Forums
Find solutions, share knowledge, and get answers from customers and experts

New to the Community? Start here.

5,806,791

members

36

online now

1,952,702

discussions

Top

Comcast filters are chronically missing one prevalent type of spam

ANSWERED
Regular Contributor

Comcast filters are chronically missing one prevalent type of spam

This is a followup to complaints I have seen here recently about Comcast failing to filter spam.

 

In general, I think Comcast does a good job of spam-filtering. However, for the last several weeks I've been seeing several examples of one particular spam pattern on a daily basis, and I've been wondering when the the spam filters would finally be updated to trap it. The spam pattern in question involves base64-encoded messages that have some non-ascii characters (not renderable on my screen) in the subject line, no body content other than image-links to the spammer's websites in the body, and display in the mailbox with a nonsensical string of esoteric words in the "summary". One typical string of words displayed in a recent piece of spam was "homophonous quarterfinal matriculate apocryphal".

 

After dutifully slapping "spam" labels on these for several weeks, I'm wondering when Comcast will finally figure out how to filter them. They got delivered to my smartphone for only a couple of days before that system started to filter them out.

 

For what it's worth, I have found Comcast's spam-filtering to be overly aggressive when it comes to (1) mail from people who send several similar-looking messages in the same hour, day, or week (often there are legitimate reasons for this!) and (2) mail from legitimate commercial entities that are aggressive in their marketing -- and likely have been marked as "spam" by past customers who are legitimately on their mailing lists, but are tired of their e-mails. The fact that Comcast's (or anyone else's) filtering is overly aggressive in some areas does not mean that it is 100% efficient in trapping actual spam.

Accepted Solution

Re: Comcast filters are chronically missing one prevalent type of spam

Thank you for alerting us to this issue. 

 

At the time of the post, we were able to investigate and have our spam filters updated.  After investigating again today, it does appear that the issue is now resolved. 

 

Can you please let us know if you receive any more spam messages that appear to be of the type?  If you could either post here or PM (private message) me with headers of a message from this spam attack?  This way we can ensure any new tactics that the spammers are using to get by the many layers of protection we have in place are updated as quickly as possible to prevent more from being delivered.

 

If anyone has any sort of spam issue, please start a new thread and we will be glad to investigate and take action.  When posting a new thread, please ensure to include as much details as possible and all header information (minus personal information).  This will help us resolve in the quickest fashion.

 

Thank you,

 

Rob W

Comcast

View answer in context
Regular Contributor

Re: Comcast filters are chronically missing one prevalent type of spam

So what you're basically saying is that you make it a practice of opening spam messages?

Regular Contributor

Re: Comcast filters are chronically missing one prevalent type of spam

Nope. These messages show up daily in my inbox, and I dutifully report them as spam because it is obvious from the mailbox view that they are spam.

 

To describe the spam for this message, I used Thunderbird to display the source code without opening the remote content in the messages.

Problem Solver

Re: Comcast filters are chronically missing one prevalent type of spam

Mistakeprone,

 

Could you please post the headers from one of these the next time you get one so that I can take a look?

 

It's likely they aren't turning into spam, because not enough users are reciveing them.

 

Thanks,

 

Adam

--
Adam
Comcast National Engineering // Customer Protection Team
Regular Contributor

Re: Comcast filters are chronically missing one prevalent type of spam

As luck would have it, I haven't gotten any of these messages today.   

 

Here's one set of headers from yestereday:

 

Return-Path: corpulently@jar28xvqko.com
Received: from imta10.emeryville.ca.mail.comcast.net (LHLO
imta10.emeryville.ca.mail.comcast.net) (76.96.30.14) by
sz0160.ev.mail.comcast.net with LMTP; Sun, 27 Feb 2011 07:34:57 +0000 (UTC)
Received: from chlichamerica.info ([108.62.146.220])
by imta10.emeryville.ca.mail.comcast.net with comcast
id Cvaw1g00Q4lYGbw0AvawFY; Sun, 27 Feb 2011 07:34:57 +0000
X-CAA-SPAM: F00000
X-Authority-Analysis: v=1.1 cv=UgTHTuu45bcp09rlAd77ceI3FrElsbvu6XWohkGXKp4=
c=1 sm=1 a=an1HFKeeL3UA:10 a=jPJDawAOAc8A:10 a=8nJEP1OIZ-IA:10
a=4n0wD9Irljz1TBWqGs4ZEQ==:17 a=3RF0uBpwAAAA:8 a=wUiUbgB22797eHxnUSgA:9
a=TE59pWcjXBJ_M-rV2_QA:7 a=Hvvd5f8VTybPziScCBSgSlNOjB0A:4 a=wPNLvfGTeEIA:10
a=4n0wD9Irljz1TBWqGs4ZEQ==:117
From: Lowes Reward Center <expiated.girding@jar28xvqko.com>
Subject: =?ISO-8859-1?Q?=0E=1F=17=0F=1F=08House=20Rewards=3A=20Earn=20a=20FREE=20Lowe=27s=20Gift=03=20Card=21=20=0B=2D=20Detail=13s=20Inside?=
MIME-Version: 1.0
X-UID: [redacted]
Content-Transfer-Encoding: base64
Content-Type: text/html; charset="iso-8859-1"

And another set of headers from two days ago:

Return-Path: rf5ht53q2b3ny8er@3hrmy3s6aq.com
Received: from imta27.emeryville.ca.mail.comcast.net (LHLO
imta27.emeryville.ca.mail.comcast.net) (76.96.30.95) by
sz0160.ev.mail.comcast.net with LMTP; Sat, 26 Feb 2011 08:18:38 +0000 (UTC)
Received: from hijasapevi.info ([108.62.53.157])
by imta27.emeryville.ca.mail.comcast.net with comcast
id CYJd1g00L3PWiJL0NYJdE2; Sat, 26 Feb 2011 08:18:38 +0000
X-CAA-SPAM: F00000
X-Authority-Analysis: v=1.1 cv=qoxGc1KaNMjbyjsFi3B3JT6KIlgmXg2Jq3P8u0X92RM=
c=1 sm=1 p=K28icVtjzMiJN8Bcoag3qg==:17 a=T8sacQPJR7QA:10 a=jPJDawAOAc8A:10
a=8nJEP1OIZ-IA:10 a=RZzIYtPpAAAA:8 a=ZsddpLLzjBbuuMPe5e8A:9
a=S-yTFbD73OD5lx-soboA:7 a=KW_cFUWeeFo_2OOPKNqCXRTTqVwA:4 a=wPNLvfGTeEIA:10
a=K28icVtjzMiJN8Bcoag3qg==:117
From: Virus Protection Specials <cataloger.asymptote@3hrmy3s6aq.com>
Subject: =?ISO-8859-1?Q?=08=08=18=02=01=0C2011=20Norton=20Anti=2DVirus=20P=16rotec=08t=1Aion=20=2D=20Save=2025=25=20OFF?=
MIME-Version: 1.0
X-UID: [redacted]
Content-Transfer-Encoding: base64
Content-Type: text/html; charset="iso-8859-1"

PS - In posting this message I got the error message "Your post has been changed because invalid HTML was found in the message body. The invalid HTML has been removed. Please review the message and submit the message when you are satisfied." I don't see what was removed (I never do), so hopefully it wasn't important.

 

Regular Contributor

Re: Comcast filters are chronically missing one prevalent type of spam

Today's spam was merely delayed in reaching me, but today's batch included 5 messages (all sent at the same time) fitting this pattern. Here are the headers from one of them:

 

From - Mon Feb 28 22:09:57 2011
X-Account-Key: account1
X-UIDL: 382860.B3cpVL9UN9W0mdVbhmNVfA3YxU4=
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: gloved@bluejackoak.info
Received: from imta34.westchester.pa.mail.comcast.net (LHLO
imta34.westchester.pa.mail.comcast.net) (76.96.62.65) by
sz0160.ev.mail.comcast.net with LMTP; Mon, 28 Feb 2011 07:07:38 +0000 (UTC)
Received: from expatiatescandinavia.info ([108.62.136.115])
by imta34.westchester.pa.mail.comcast.net with comcast
id DK7e1g03g2VZf5G0aK7eBX; Mon, 28 Feb 2011 07:07:39 +0000
X-CAA-SPAM: F00000
X-Authority-Analysis: v=1.1 cv=OgMG+gRzmVePLJlwkSEJWsbTm4Dj75u84eQnaNfMKS4=
c=1 sm=1 a=_CETIR3rlYQA:10 a=jPJDawAOAc8A:10 a=8nJEP1OIZ-IA:10
a=QIVJJVE81jdUOVnYx35yEQ==:17 a=Hc6u3RXGAAAA:8 a=8Z8ob5xvqm9bGCIUNU8A:9
a=L2uE32p413Z7KYYQFYUA:7 a=lpAIfpdg3-MU7y1cBwvYc4w8ZikA:4 a=wPNLvfGTeEIA:10
a=QIVJJVE81jdUOVnYx35yEQ==:117
From: Olive Garden Rewards <remorselessly.akhenaten@bluejackoak.info>
Subject: =?ISO-8859-1?Q?=12=02=03=02=0E=0ELimited=20Time=3A=20Get=20a=20F=19REE=20Dinner=20for=202=20at=20T=1Bhe=20Olive=20=1CGarden?=
MIME-Version: 1.0
X-UID: [redacted]
Content-Transfer-Encoding: base64
Content-Type: text/html; charset="iso-8859-1"

Problem Solver

Re: Comcast filters are chronically missing one prevalent type of spam

Thanks! I'll look into these, and see what I can do.

 

-Adam

--
Adam
Comcast National Engineering // Customer Protection Team
Regular Contributor

Re: Comcast filters are chronically missing one prevalent type of spam

This spam is continuing to arrive, unimpeded by Comcast's spam filter. Today's batch contained six of these spam messages. Here are the headers from one of them:

 

Return-Path: appendicitis@oykbk7r3xm.com
Received: from imta29.westchester.pa.mail.comcast.net (LHLO
imta29.westchester.pa.mail.comcast.net) (76.96.62.33) by
sz0160.ev.mail.comcast.net with LMTP; Fri, 4 Mar 2011 07:54:03 +0000 (UTC)
Received: from mx106.OYKBK7R3XM.COM ([67.58.104.106])
by imta29.westchester.pa.mail.comcast.net with comcast
id Evu31g00P2HktCb0Vvu3au; Fri, 04 Mar 2011 07:54:03 +0000
X-CAA-SPAM: F00000
X-Authority-Analysis: v=1.1 cv=em1m7VlfRH4E8CMaOCwhy5YUvRRTqG3y0IPhJtu93gw=
c=1 sm=1 p=fkchQBx3xjGHro05kJwwdA==:17 a=PzMnlhjr2hsA:10 a=jPJDawAOAc8A:10
a=8nJEP1OIZ-IA:10 a=VC2CWxFWAAAA:8 a=nINSm39wMUrO_POYof4A:9
a=ZTzOKrpoTthsg4kcFP8A:7 a=6i9j654X3u7m_OAMb8ryHqm1aJoA:4 a=wPNLvfGTeEIA:10
a=fkchQBx3xjGHro05kJwwdA==:117
From: 2011 STUDENTS <cabdrivers.iodic@OYKBK7R3XM.COM>
Subject: =?ISO-8859-1?Q?=03=01=01=16=1F=17Go=20Back=20to=20School=2E=20Grant=20F=02unding=20May=20Be=20Ava=1Eilab=16le=2E?=
MIME-Version: 1.0
X-UID: [redacted]
Content-Transfer-Encoding: base64
Content-Type: text/html; charset="iso-8859-1"
Regular Contributor

Re: Comcast filters are chronically missing one prevalent type of spam

Mistakeprone, I've noticed that in ever header you've posted that the Subject Line always has a lot of added characters in it and that every one of them begins with =?ISO-8859.  Is this the way they normally look when they're in your In-Box or is there something you're using to add those characters in there?

 

The full Subject Line in your last post looks like this:

 

=?ISO-8859-1?Q?=03=01=01=16=1F=17Go=20Back=20to=20School=2E=20Grant=20F=02unding=20May=20Be=20Ava=1Eilab=16le=2E?=

Regular Contributor

Re: Comcast filters are chronically missing one prevalent type of spam

Yes,essentially. That's not exactly how it renders in my inbox, though. In Thunderbird, I see something like " Try Proactiv on Yo u" (that's an example from a few days ago). In SmartZone, for that same message, what I see on the subject line is "Try Proactiv on Your Skin Today and Save 50% + FREE Shipping - swell arrhythmical genealogy supercarbonise lettermen caricatures suppositions Iroquois beaker"

Contributor

Re: Comcast filters are chronically missing one prevalent type of spam

Looking forward to the answer on this one as I am one of the others who is receiving loads of SPAM on a daily basis.  I also am lucky enough to have the ISO 8859 group, usually 8 to 10 messages, almost all are duplicates, and the amount of SPAM seems to be increasing each day.  I use the SPAM button religiously, but also have tried the FILTER option, to see if that might have a positive effect.  Here is a sample header:

 

Return-Path: rheumatism@n3s665yan9.com
Received: from imta05.emeryville.ca.mail.comcast.net (LHLO
imta05.emeryville.ca.mail.comcast.net) (76.96.30.45) by
sz0064.ev.mail.comcast.net with LMTP; Sun, 6 Mar 2011 07:45:18 +0000 (UTC)
Received: from mx5.N3S665YAN9.COM ([67.58.111.5])
by imta05.emeryville.ca.mail.comcast.net with comcast
id FjlH1g01o0726XX05jlJh0; Sun, 06 Mar 2011 07:45:18 +0000
X-CAA-SPAM: 00000
X-Authority-Analysis: v=1.1 cv=icA0e+tseRohs4MwMF8tMtx6DRYUCo01i1OKzgseM/A=
c=1 sm=1 p=IKR6B5G47gYX+bdNKn86Yg==:17 a=ZLGirQZCQesA:10 a=jPJDawAOAc8A:10
a=8nJEP1OIZ-IA:10 a=6m6ugEMxAAAA:8 a=4e-tMMVTej85pYT_edkA:9
a=E_uuLvXuNNt05pXFKacA:7 a=gHn6TuQd_p8u81ut3GlwtkTwU54A:4 a=wPNLvfGTeEIA:10
a=IKR6B5G47gYX+bdNKn86Yg==:117
From: =?ISO-8859-1?Q?_match.com=ae_____?= <breezy.outmigration@N3S665YAN9.COM>
Subject: =?ISO-8859-1?Q?=02=0B=0C=0C=0B=12Browse=20Phot=18o=0Bs=20of=20S=17ingles=20in=20Holland=2C=20MI=20FREE=21?=
MIME-Version: 1.0
X-UID: gezellig
Content-Transfer-Encoding: base64
Content-Type: text/html; charset="iso-8859-1"


Regular Visitor

Re: Comcast filters are chronically missing one prevalent type of spam

Moderator Adam,

 

I am getting these types of spam messages again. basically the body of the message is a picture the subject contains my comcast id with underscores. I have put the source from one message below. I have several others if you would like more. Please let me know what else I can do to help you find a way to build more filters for this.

 

Return-Path: ayuysohpo@denizertasimacilik.com
Received: from imta30.westchester.pa.mail.comcast.net (LHLO
 imta30.westchester.pa.mail.comcast.net) (76.96.62.92) by
 sz0168.ev.mail.comcast.net with LMTP; Sun, 6 Mar 2011 15:02:57 +0000 (UTC)
Received: from denizertasimacilik.com ([83.206.88.161])
	by imta30.westchester.pa.mail.comcast.net with comcast
	id FqzB1g00N3UsB2j0Wr2wmg; Sun, 06 Mar 2011 15:02:58 +0000
X-CAA-SPAM: F00000
X-Authority-Analysis: v=1.1 cv=roTLzr0ao8GlkZs7xe0CtQI/CwhIHqPPMXLNJEKfVGo=
 c=1 sm=1 a=YWRyixCSO9cA:10 a=8nJEP1OIZ-IA:10 a=HZkzHcSNTfKRkAqufy94SA==:17
 a=CUrE5AnqAAAA:8 a=GigDhPlBb7l3UUzttbcA:9 a=30K4dDD5ezGmNJJlkiIA:7
 a=mgHaCXarcxNWpwTLMNEjEk9huWAA:4 a=wPNLvfGTeEIA:10
 a=HZkzHcSNTfKRkAqufy94SA==:117
Date: Sun, 06 Mar 2011 07:03:14 -0800
From: "News1 Reports" <ayuysohpo@denizertasimacilik.com>
To: <suzheng@comcast.net>
Subject: suzheng_Local.Job.Scam.Exposed!suzheng
Content-Type: text/html;
	charset="iso-8859-1"

<style>
ayuysohpo{


}
bf428ff6b0a5e33e13888ae6caef58b0
German. To me, this was the paramount issue. I closed my eyes, and
compose himself, she felt that he would be humiliated if she came upon him
From the heights of the seventh heaven,
"That's the idea exactly.  That's what college ought to be for,
palace and returned to them, when they should take her and carry
Enter Richard, Lord Hastings, and Sir William Stanley.
The sufferer turned to one who lay beside him with:
cannon, mortars, firearms, pistols, bombs, grenades, powder,
Danube; part fled with their general to the village of
30:37. And Jacob took green rods of poplar, and of almond, and of
following pretext, as traditions tell: For many generations, as long as
he loved him with an exceeding love and questioned him of his
It is exactly for this reason that there is nothing more inconsistent
"But I have quite given up that idea," said Yeobright,

</style>



<body>
<center>
<a href="http://2csgamefarm.com/h?115e6u8yb2vzx227kcc6wr64924c5x0883dawb22l4yo7h297k0x2573nh758uww8d1oklgi369...">
suzheng__ClickHere__suzheng
</a><br/><br/>
<img src="http://2csgamefarm.com/i?4xywmdoefzo6129g1oi07tq68z29h98eyi82n57qefk357h10s4u27kydur43b9a8t8a0i2bqu4..." usemap="#ayuysohpo" border="0"/>
<map name="ayuysohpo">
<area shape="rect" coords="0,0,767,480"  href="http://2csgamefarm.com/h?nrt9l1e32i6i0ec9ki2c8173977k860d8448p46gq8gpa581ndyx28j0egt27q416w5enoq11uv..."target=_blank>
<area shape="rect" coords="452,660,467,663" href="http://2csgamefarm.com/j?w80f792789noza8g9ion55c3rciaz3za2961su4g1yd2b1fs5uz07616anjy567z147h1dwe15d..."target=_blank>
<area shape="rect" coords="229,688,585,748" href="http://2csgamefarm.com/d?smf5kaaa2zo12t9pk3w9i0t46tffztdxo6337356l049uysb044gxjuvp21u15206y04c1712a2..."target=_blank>
</map>
</center>
</body>

<style>
ayuysohpo{


}
on beardless races;
empire nor ruined site nor rotten brick," the Just King thanked
"With that he pulled open his shirt, and with his long sharp nails
people then observing, that there was no corn to be bought, and that, if


</style>
Regular Contributor

Re: Comcast filters are chronically missing one prevalent type of spam


LaxMom98 wrote:

Moderator Adam,

 

I am getting these types of spam messages again. basically the body of the message is a picture the subject contains my comcast id with underscores. I have put the source from one message below. I have several others if you would like more. Please let me know what else I can do to help you find a way to build more filters for this.

 

 

original.jpg

Email Expert

Re: Comcast filters are chronically missing one prevalent type of spam

 


Hook1 wrote:

Mistakeprone, I've noticed that in ever header you've posted that the Subject Line always has a lot of added characters in it and that every one of them begins with =?ISO-8859.


That prefix indicates that the subject line contains encoded characters. Spammers probably do this because it makes it harder for filters to recognize them. For instance, in an encoded subject line, =20 represents the Space character. They also insert coded representations of non-printing characters randomly in the subject.

 




Community Icon
I am not a Comcast employee, I am a paying customer just like you!
I am an XFINITY Forum Expert and I am here to help. For information on the program click here.
We ask that you post publicly so people with similar questions may benefit from the conversation.

Was your question answered? Mark it as an accepted solution!solution Icon
Community Icon
I am not a Comcast employee. I am a paying customer just like you!
I am an XFINITY Forum Expert and I am here to help.
We ask that you post publicly so people with similar questions may benefit.

Was your question answered? Mark it as an accepted solution!solution Icon
Community Icon
I am not a Comcast employee.

Was your question answered?
Mark it as a solution!solution Icon

Frequent Visitor

Re: Comcast filters are chronically missing one prevalent type of spam

I'm getting these spams as well and every one of them has "

Content-Type: text/html;
charset="iso-8859-1""

in it.

No amount of playing with the spam filter blocks this. Can we not get a spam filter that blocks every mail of this type since I doubt anybody who wasn't sending spam would code their mail this way?
Email Expert

Re: Comcast filters are chronically missing one prevalent type of spam

I think if you'll check, you'll see that you also get some non-spam mail with that header.




Community Icon
I am not a Comcast employee, I am a paying customer just like you!
I am an XFINITY Forum Expert and I am here to help. For information on the program click here.
We ask that you post publicly so people with similar questions may benefit from the conversation.

Was your question answered? Mark it as an accepted solution!solution Icon
Community Icon
I am not a Comcast employee. I am a paying customer just like you!
I am an XFINITY Forum Expert and I am here to help.
We ask that you post publicly so people with similar questions may benefit.

Was your question answered? Mark it as an accepted solution!solution Icon
Community Icon
I am not a Comcast employee.

Was your question answered?
Mark it as a solution!solution Icon

Frequent Visitor

Re: Comcast filters are chronically missing one prevalent type of spam

I have also been receiving spam over the past 2 months when I NEVER had a problem before.  I've created a filter catch those that have my email address with an underscore and it's working for those emails.  But I would like to create a Smart Zone filter for header information.  This filter is working in my outlook but would rather have the spam never reach my outlook mailbox.  I don't see a way to filter info in a header.  What am I missing?  Please see Return Path text in red "contact@" in the header below which I want to filter.

 

Return-Path: contact@maidwithdraw.com
Received: from imta11.emeryville.ca.mail.comcast.net (LHLO
 imta11.emeryville.ca.mail.comcast.net) (76.96.30.22) by
 sz0014.wc.mail.comcast.net with LMTP; Wed, 9 Mar 2011 21:48:45 +0000 (UTC)
Received: from c-205-251-59-80.inforelay.net ([205.251.59.80])
	by imta11.emeryville.ca.mail.comcast.net with comcast
	id H9nP1g01d1jryzR0B9ojXz; Wed, 09 Mar 2011 21:48:43 +0000
X-CAA-SPAM: 00000
X-Authority-Analysis: v=1.1 cv=Wu/naAhTXil5X6989ZO+D4l8ntn/sgf5vrC1flQJWZg=
 c=1 sm=1 a=132m7pMs4ikA:10 a=cC_MhLP1P9QA:10 a=jPJDawAOAc8A:10
 a=8nJEP1OIZ-IA:10 a=Jwir1Xxmyoc0clZaFO14EQ==:17 a=zMvSTwLJAAAA:8
 a=C_IRinGWAAAA:8 a=iuhTyWNO6lwNo21mrSsA:9 a=Fycshks6FFLPIm0BnaUA:7
 a=aJR_LbZAZ-kNAMiwh6fHq4TjghkA:4 a=wPNLvfGTeEIA:10 a=l8ct6rdDbogA:10
 a=8kKXj_f4iC0A:10 a=D70MrvMpvJEA:10 a=sRMJbWwn4twA:10 a=si9q_4b84H0A:10
 a=Jwir1Xxmyoc0clZaFO14EQ==:117
From: Restaurant Card <infold217@maidwithdraw.com>
Subject: =?ISO-8859-1?Q?=0F=01Lo=18cal=20Resta=11urant=20Coup=0Fons=20no=19w=20ava=17ilable=20for=20do=04wnload=01=1A=17?=
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
X-Checking: JFV4Ssc57OrK3b4OvtCq1SXNnD

 

 

 

Email Expert

Re: Comcast filters are chronically missing one prevalent type of spam

Are you trying to create a filter based on the Return Path line?  I'm not sure that will do much good since that is one of the things that will change quite often in spam.

 

mady

>


Community Icon
I am not a Comcast employee, I am a paying customer just like you!
I am an XFINITY Forum Expert and I am here to help. For information on the program click here.
We ask that you post publicly so people with similar questions may benefit from the conversation.

Was your question answered? Mark it as an accepted solution!solution Icon
Community Icon
I am not a Comcast employee. I am a paying customer just like you!
I am an XFINITY Forum Expert and I am here to help.
We ask that you post publicly so people with similar questions may benefit.

Was your question answered? Mark it as an accepted solution!solution Icon
Community Icon
I am not a Comcast employee.

Was your question answered?
Mark it as a solution!solution Icon

Frequent Visitor

Re: Comcast filters are chronically missing one prevalent type of spam

Yes it's the "contact@" in the return path that I'm trying to filter.  It's working in Outlook perfectly but I can't seem to figure out how to create a similar filter in Smartzone.  There doesn't seem to be an option to filter content in the "header" or "source".  Any suggestions? 

Regular Contributor

Re: Comcast filters are chronically missing one prevalent type of spam

The stream of spam in the pattern that started this thread seems to have dried up, but a new spam pattern has taken its place. As with the earlier pattern, this spam is showing up many times each day. The Smartzone spam filter is not catching it, but it is not making it to my Android phone when I check Comcast e-mail from my phone, so I know that some other providers are successfully detecting it. Here are some headers:

 

Return-Path: whitemail@whitemailonly.com
Received: from imta26.emeryville.ca.mail.comcast.net (LHLO
imta26.emeryville.ca.mail.comcast.net) (76.96.30.79) by
sz0160.ev.mail.comcast.net with LMTP; Fri, 18 Mar 2011 07:12:18 +0000 (UTC)
Received: from whilemailonly.com ([31.148.248.119])
by imta26.emeryville.ca.mail.comcast.net with comcast
id LXCC1g00u2bJRRr0SXCF3b; Fri, 18 Mar 2011 07:12:18 +0000
X-CAA-SPAM: F00000
X-Authority-Analysis: ??
From: Match.com <whitemailonly@whitemailonly.com>
Subject: Browse Photos of Singles in Your Area!
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="iso-8859-1"
X-WhitelistID: 822ba7260614daabde1ee08a09b4adb3-46216
Message-ID: <0.0.7.29B.1CBE50F6B7BAE44.0@whilemailonly.com>
Date: Thu, 17 Mar 2011 18:54:30 -0700

Return-Path: whitemail@whitemailonly.com
Received: from imta26.emeryville.ca.mail.comcast.net (LHLO
imta26.emeryville.ca.mail.comcast.net) (76.96.30.79) by
sz0160.ev.mail.comcast.net with LMTP; Fri, 18 Mar 2011 05:59:28 +0000 (UTC)
Received: from whitemailonly.com ([46.16.171.7])
by imta26.emeryville.ca.mail.comcast.net with comcast
id LVzQ1g00c09vcUW0SVzQnb; Fri, 18 Mar 2011 05:59:26 +0000
X-CAA-SPAM: F00000
X-Authority-Analysis: ??
From: LowerMyBills <whitemailonly@whitemailonly.com>
Subject: Banks Forced to Forgive Credit Card Debt! See If You Qualify for Relief!
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="iso-8859-1"
X-WhitelistID: c4ae70976a7e3a3cf51b10e47e4c787a-46179
Message-ID: <0.0.E.6E0.1CBE50B2D505858.0@whitemailonly.com>
Date: Thu, 17 Mar 2011 18:24:07 -0700
Return-Path: whitemail@whitemailonly.com
Received: from imta26.emeryville.ca.mail.comcast.net (LHLO
imta26.emeryville.ca.mail.comcast.net) (76.96.30.79) by
sz0160.ev.mail.comcast.net with LMTP; Fri, 18 Mar 2011 02:35:24 +0000 (UTC)
Received: from whilemailonly.com ([31.148.248.111])
by imta26.emeryville.ca.mail.comcast.net with comcast
id LSbG1g02W2Qx2jj0SSbKTH; Fri, 18 Mar 2011 02:35:22 +0000
X-CAA-SPAM: F00000
X-Authority-Analysis: ??
From: Credit Review <whitemailonly@whitemailonly.com>
Subject: See your 2010 Credit Score Today! Details Inside
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="iso-8859-1"
X-WhitelistID: 40fb37c71c140756f18079c47967e43e-46218
Message-ID: <0.0.7.3E5.1CBE50FD99F407A.0@whilemailonly.com>
Date: Thu, 17 Mar 2011 18:57:34 -0700

All of those messages have some obvious commonalities for filtering, but I expect that the sender will change those elements soon.

Contributor

Re: Comcast filters are chronically missing one prevalent type of spam

I also have been hit with MANY whitemailonly spam emails.  I am ready to leave COMCAST just to avoid the poor spam treatment.

Contributor

Re: Comcast filters are chronically missing one prevalent type of spam

I have blocked the spam email for    [removed - please do not post email addresses] both in comcast and in windows live - but it doesn't stop the 100 daily emmails - why?

Regular Contributor

Re: Comcast filters are chronically missing one prevalent type of spam


jimc_usa wrote:

I have blocked the spam email for   [removed - please do not post email addresses] both in comcast and in windows live - but it doesn't stop the 100 daily emmails - why?


Jimc, it could be because you're not properly setting up the "Rule" to block them.

 

Post the complete header from one of these spam messages, with your personal information omitted, so it can be reviewed.

Frequent Visitor

Re: Comcast filters are chronically missing one prevalent type of spam

I've received dozens of spams from this outfit since posting items on the local FreeCycle site.

That's a Yahoo thing......................should have known better.

I use a product called Mail Washer, so have the option to delete junk before it hits my mailbox, but

it is annoying to continue seeing these mutts, when complaints have obviously been made to Comcast

for more than a little while.

 

BluesMa

Regular Contributor

Re: Comcast filters are chronically missing one prevalent type of spam

Don't be so qucik to castigate Comcast.

 

Overall, Comcast does a very good job of spam-blocking. For example, in the last day Comcast blocked some annoying phishing messages that were delivered to friends of mine who use other ISPs.

 

The situation is that persistent spammers are continually changing their modus operandi in hopes that a small percentage of their messages will be delivered -- and some of their messages do get through.

Frequent Visitor

Re: Comcast filters are chronically missing one prevalent type of spam

These whitemail buggers are prolific and determined, too bad they can't find something better to do. 

Oh well.     Not a show stopper by any means.

 

BluesMa

Contributor

Re: Comcast filters are chronically missing one prevalent type of spam

Here it is I think? and if you create a rule for me remember I am no Einstein.

 

eturn-Path: whitemail@whitemailonly.com
Received: from imta26.emeryville.ca.mail.comcast.net (LHLO
 imta26.emeryville.ca.mail.comcast.net) (76.96.30.79) by
 sz0041.ev.mail.comcast.net with LMTP; Sun, 20 Mar 2011 15:30:14 +0000 (UTC)
Received: from whitemailonly.com ([31.148.228.34])
 by imta26.emeryville.ca.mail.comcast.net with comcast
 id MTVy1g07n0lACdr0STW4jM; Sun, 20 Mar 2011 15:30:08 +0000
X-CAA-SPAM: 00000
X-Authority-Analysis: ??
From: Diabetic Tools <whitemailonly@whitemailonly.com>
Subject: [Norton AntiSpam]Free Tools to Help Manage Your Diabetes
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="iso-8859-1"
X-WhitelistID: 5fed75ec5e6a76d609484a50ed89e91d-46611
Message-ID: <0.0.E.6F1.1CBE6CDF63CCB66.0@whitemailonly.com>
Date: Sun, 20 Mar 2011 00:10:58 -0700
X-Brightmail-Tracker: AAAAAReswTw=
X-Brightmail-Tracker: AAAAARew6kw=

 

Frequent Visitor

Re: Comcast filters are chronically missing one prevalent type of spam

I am receiving the whitemailonly e-mails repeatedly as well.  I've put the address on my blocked sender list, but am continuing to receive them.  Any tricks anyone has found that work?  I also receive a number daily of addresses or subjects with various wingding symbols attached.  Usually the addresses are really strange.  I add each one to the blocked sender list (which at this point is extremely long).

Frequent Visitor

Re: Comcast filters are chronically missing one prevalent type of spam

Here's one from this morning.

Does knowing this mean I have means to bomb it ?

 

 

Return-Path: whitemail@whitemailonly.com
Received: from imta26.emeryville.ca.mail.comcast.net (LHLO
 imta26.emeryville.ca.mail.comcast.net) (76.96.30.79) by
 sz0015.ev.mail.comcast.net with LMTP; Sun, 20 Mar 2011 18:33:54 +0000 (UTC)
Received: from whitemailonly.com ([31.148.228.179])
        by imta26.emeryville.ca.mail.comcast.net with comcast
        id MWZi1g02C3sshcX0SWZpvP; Sun, 20 Mar 2011 18:33:52 +0000
X-CAA-SPAM: F00000
X-Authority-Analysis: ??
From: Match.com <whitemailonly@whitemailonly.com>
Subject: Chat Online with Singles in Your Area!
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="iso-8859-1"
X-WhitelistID: 074f0821c60b7ebe037e5c34d7c19848-46662
Message-ID: <0.0.E.627.1CBE7216F9EC326.0@whitemailonly.com>
Date: Sun, 20 Mar 2011 10:08:30 -0700
X-Antivirus: AVG for E-mail 10.0.1204 [1498/3518]
X-AVG-ID: ID2E0087FE-41D000F5


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
            "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<title>WhitemailOnly</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body bgcolor="#FFFFFF" link="#0066CC">


<table border="0" cellspacing="0" cellpadding="10" align="center" width=100%><tr valign=middle>
    <td align="left">
    </td>
    <td align="right">
    <br />
    </td>
</tr></table>


<table width="90%" border="0" cellspacing="0" cellpadding="1" align="center"><tr><td>
<table width="100%" border="0" cellspacing="0" cellpadding="5" align="center">
<tr valign="top"><td bgcolor="#FFFFFF"><font face=verdana,arial,helvetica size=1>
<br/>
<br/>
<br/>
<br/>
<p align="center"><b><font face="Verdana" size="2">
<a href="http://whitemailonly.com/material/133256/46662/1006-008-0-2/" style="text-decoration: none">
<font color="#f36c0b"></font></a></font></b></p>
<p align="center">
<a href="http://whitemailonly.com/material/133256/46662/1006-008-0-2/">
<img border="0" src="http://whitemailonly.com/images/mtchchat.jpg"></a><br>
<a href="http://whitemailonly.com/material/40108/1000/2000/">
<img border="0" src="http://whitemailonly.com/images/match2.jpg"></a><br>
</p>
                        <br />
<center>

                                If you would like to unsubscribe from this newsletter
                                please follow this link: <a href="http://whitemailonly.com/material/40085/1000/2000/">here</a>. <br />
                                Mail to: WhiteMailOnly P.O Box 17598 #88657 Baltimore, MD 21297
</center>


</table>
<br/>

Regular Contributor

Re: Comcast filters are chronically missing one prevalent type of spam

It is not necessary to set your own filters to block most spam. Go to the "Email manager" in SmartZone to enable spam filtering on your account. Once you do that, Comcast will block most spam for you.

 

The URL for setting up the spam filter is https://customer.comcast.com/SmartUrl/Secure/spamFilter

Regular Visitor

Re: Comcast filters are chronically missing one prevalent type of spam

I got 5 whitemail only today HELP

 

Frequent Visitor

Re: Comcast filters are chronically missing one prevalent type of spam

Whitemailonly has been going wild for a couple of days.

Try what Mistake Prone suggested to me and see if that helps.

 

Blues Ma

New Poster

Re: Comcast filters are chronically missing one prevalent type of spam

As of the date of this posting I continue to see the same whitemailonly@whitemailonly.com.

 

I've set up a filter to forward them to the Federal Trade Commission's website for unsolicited spam mail (spam@uce.gov).   Their unsubscribe function is farce on these emails.

 

I've decided to save them off to a separate folder till FTC or Comcast figures out why these are okay for us to receive, or the farce company is engaged by the authorities.

 

T

 

 

Contributor

Re: Comcast filters are chronically missing one prevalent type of spam

While we attempt to figure how to foil whitemailonly, I am wondering if the spammerse are following this chat, in order to continually" head us off at the pass" instead of the way it should be .. of us being able to avoid the spammers through logical and supposedly available means.

Regular Contributor

Re: Comcast filters are chronically missing one prevalent type of spam

Getting overrun with these mails, cant seem to block the domain with windows live mail.

Regular Contributor

Re: Comcast filters are chronically missing one prevalent type of spam

I made a picture to try to show those of you who are getting this spam from whitemailonly how to create a filter at your Comcast SmartZone.  I do not know if this filter will work or not because I DO NOT get this SPAM so I'm depending on those who do to post back to tell me and everyone else if this filter works or not.

 

The picture may be self explanatory but I will also give written directions.

 

Go to your SmartZone web site and

 

1. Click on Preferences

2. Click on Email Filters

3. Name the filter

 

Follow the rest of what you see in the picture and SAVE the filter.

 

Whitemailonly.jpg

 

3.  Name the filter

Frequent Visitor

Re: Comcast filters are chronically missing one prevalent type of spam

No whiteonly for more than six hours.

A record.

So either they've given up for a while, or the splendid advice above has been effective.   Smiley Happy

New Poster

Re: Comcast filters are chronically missing one prevalent type of spam

Just recently, I have started getting several whitemailonly emails, so it seems to be back 2 years later! I have also notice a big increase in spam mail the last 2 months.

Problem Solver

Re: Comcast filters are chronically missing one prevalent type of spam

Thank you for alerting us to this issue. 

 

At the time of the post, we were able to investigate and have our spam filters updated.  After investigating again today, it does appear that the issue is now resolved. 

 

Can you please let us know if you receive any more spam messages that appear to be of the type?  If you could either post here or PM (private message) me with headers of a message from this spam attack?  This way we can ensure any new tactics that the spammers are using to get by the many layers of protection we have in place are updated as quickly as possible to prevent more from being delivered.

 

If anyone has any sort of spam issue, please start a new thread and we will be glad to investigate and take action.  When posting a new thread, please ensure to include as much details as possible and all header information (minus personal information).  This will help us resolve in the quickest fashion.

 

Thank you,

 

Rob W

Comcast

Regular Visitor

Re: Comcast filters are chronically missing one prevalent type of spam

There back with a different url

From - Mon Mar 21 13:32:22 2011
X-Account-Key: account5
X-UIDL: 13100.PaCBjQbc,uV5DMyD8Hrfof2PPhE=
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: autopricefinder@whiteandcleanops.com
Received: from imta26.emeryville.ca.mail.comcast.net (LHLO
imta26.emeryville.ca.mail.comcast.net) (76.96.30.79) by
sz0156.ev.mail.comcast.net with LMTP; Mon, 21 Mar 2011 15:22:58 +0000 (UTC)
Received: from whiteandcleanops.com ([31.148.246.61])
by imta26.emeryville.ca.mail.comcast.net with comcast
id MrNu1g0551LCpRr0SrNwVH; Mon, 21 Mar 2011 15:22:58 +0000
X-CAA-SPAM: F00000
X-Authority-Analysis: ??
From: Inventory Clearance <autopricefinder@whiteandcleanops.com>
Subject: Clearance on all 2010 Vehicles | New & Used
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="iso-8859-1"
X-WhitelistID: 4e2984811973dd80964bc1b5f054363b-46721
Message-ID: <0.0.E.1D5.1CBE7D31E093958.0@whiteandcleanops.com>
Date: Mon, 21 Mar 2011 07:20:23 -0700
Regular Contributor

Re: Comcast filters are chronically missing one prevalent type of spam

Today I deleted 9 new mails from a newly named domain whitemailcloups.com, I should have written it down, I'm not positive thats exactly the spelling. But I'm sure there will be a dozen more before the night is over, so I'll get the correct info and post.

Regular Contributor

Re: Comcast filters are chronically missing one prevalent type of spam

Today its whiteandcleanops.com

Problem Solver

Re: Comcast filters are chronically missing one prevalent type of spam

Thank you, Nancy for this example. 

 

Using the available information you provided, I was able to ensure this IP is no longer able to send to Comcast.net until the spam issue is resolved.

 

In order to get this into our filter (if it hasn't already updated), would you please be able to copy and paste the content of the message to me in a private message?  In the mean time, I will investigate and see if the spammer is using different email addresses and domains.

 

Thank you,

 

Rob W

Comcast

 

 

Problem Solver

Re: Comcast filters are chronically missing one prevalent type of spam

 


velocity wrote:

Today its whiteandcleanops.com


 

I have verified that our spam filters are currently catching this spam.  Please ensure that your spam filter is on, and it should go to the spam folder if it is turned on. 

 

If any get through, please post here as it could mean the spammer has drastically changed the characteristics of this spam.

 

Thank you!

 

Rob W

Comcast

Frequent Visitor

Re: Comcast filters are chronically missing one prevalent type of spam

This is today's "white" spam offering.

 

 

Return-Path: pimsleurapproach@goodwhitemail.com
Received: from imta26.emeryville.ca.mail.comcast.net (LHLO
 imta26.emeryville.ca.mail.comcast.net) (76.96.30.79) by
 sz0015.ev.mail.comcast.net with LMTP; Tue, 22 Mar 2011 05:18:36 +0000 (UTC)
Received: from goodwhitemail.com ([31.148.245.68])
        by imta26.emeryville.ca.mail.comcast.net with comcast
        id N5JX1g08D1VGDbT0S5JYm4; Tue, 22 Mar 2011 05:18:35 +0000
X-CAA-SPAM: F00000
X-Authority-Analysis: ??
From: Pimsleur Approach <pimsleurapproach@goodwhitemail.com>
Subject: Learn a New Language in 10 Days
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="iso-8859-1"
X-WhitelistID: af1aea7d4f51c85459a36fb73aaaff64-46914
Message-ID: <0.0.E.24.1CBE84E46CE23AA.0@goodwhitemail.com>
Date: Mon, 21 Mar 2011 22:02:00 -0700
X-Antivirus: AVG for E-mail 10.0.1204 [1498/3522]
X-AVG-ID: ID30C9D372-157AF7A1


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
            "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<title>goodwhitemail</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body bgcolor="#FFFFFF" link="#0066CC">


<table border="0" cellspacing="0" cellpadding="10" align="center" width=100%><tr valign=middle>
    <td align="left">
    </td>
    <td align="right">
    <br />
    </td>
</tr></table>


<table width="90%" border="0" cellspacing="0" cellpadding="1" align="center"><tr><td>
<table width="100%" border="0" cellspacing="0" cellpadding="5" align="center">
<tr valign="top"><td bgcolor="#FFFFFF"><font face=verdana,arial,helvetica size=1>
<br/>
<br/>
<br/>
<br/>
<p align="center"><b><font face="Verdana" size="2">
<a href="http://goodwhitemail.com/material/133283/46914/1006-008-0-2/" style="text-decoration: none">
<font color="#f36c0b"></font></a></font></b></p>
<p align="center">
<a href="http://goodwhitemail.com/material/133283/46914/1006-008-0-2/">
<img border="0" src="http://goodwhitemail.com/images/ll1.jpg"></a><br>
<a href="http://goodwhitemail.com/material/40239/1000/2000/">
<img border="0" src="http://goodwhitemail.com/images/llou.jpg"></a><br>
</p>
                        <br />
<center>

                                If you would like to unsubscribe from this newsletter
                                please follow this link: <a href="http://goodwhitemail.com/material/40085/1000/2000/">here</a>. <br />
                                Mail to: goodwhitemailP.O Box 17598 #88657 Baltimore, MD 21297
</center>


</table>
<br/>
<br/>
<br/>
<br/>

</font></td>
</tr>
</table>
</td></tr>
</table>
</body>
<hr noshade="noshade" size="1"><p class="avgcert" align="left" color="#000000">No virus found in this message.<br>
Checked by AVG - <a href='http://www.avg.com'>www.avg.com</a><br>
Version: 10.0.1204 / Virus Database: 1498/3522 - Release Date: 03/22/11</p></html>


Frequent Visitor

Re: Comcast filters are chronically missing one prevalent type of spam

 

And this one.    Hoping we'll respond by asking to unsubscribe even.

 

 

Return-Path: homewarranty@goodwhitemail.com
Received: from imta26.emeryville.ca.mail.comcast.net (LHLO
 imta26.emeryville.ca.mail.comcast.net) (76.96.30.79) by
 sz0015.ev.mail.comcast.net with LMTP; Tue, 22 Mar 2011 10:23:09 +0000 (UTC)
Received: from goodwhitemail.com ([31.148.236.206])
        by imta26.emeryville.ca.mail.comcast.net with comcast
        id NAP61g00P4TsGMr0SAP6AU; Tue, 22 Mar 2011 10:23:09 +0000
X-CAA-SPAM: F00000
X-Authority-Analysis: ??
From: Home Warranty <homewarranty@goodwhitemail.com>
Subject: If Your AC or Heater Breaks It Can Cost up to $2,365
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="iso-8859-1"
X-WhitelistID: c57f77caf0df49a80dd24cfa6419cff4-46971
Message-ID: <0.0.E.298.1CBE86B26D60E24.0@goodwhitemail.com>
Date: Tue, 22 Mar 2011 01:28:42 -0700
X-Antivirus: AVG for E-mail 10.0.1204 [1498/3522]
X-AVG-ID: ID3893BF5B-3EC07CC5


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
            "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<title>goodwhitemail</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body bgcolor="#FFFFFF" link="#0066CC">


<table border="0" cellspacing="0" cellpadding="10" align="center" width=100%><tr valign=middle>
    <td align="left">
    </td>
    <td align="right">
    <br />
    </td>
</tr></table>


<table width="90%" border="0" cellspacing="0" cellpadding="1" align="center"><tr><td>
<table width="100%" border="0" cellspacing="0" cellpadding="5" align="center">
<tr valign="top"><td bgcolor="#FFFFFF"><font face=verdana,arial,helvetica size=1>
<br/>
<br/>
<br/>
<br/>
<p align="center"><b><font face="Verdana" size="2">
<a href="http://goodwhitemail.com/material/133202/46971/1006-008-0-2/" style="text-decoration: none">
<font color="#f36c0b"></font></a></font></b></p>
<p align="center">
<a href="http://goodwhitemail.com/material/133202/46971/1006-008-0-2/">
<img border="0" src="http://goodwhitemail.com/images/homewarranty3.jpg"></a><br>
<a href="http://goodwhitemail.com/material/40167/1000/2000/">
<img border="0" src="http://goodwhitemail.com/images/hw102.jpg"></a><br>
</p>
                        <br />
<center>

                                If you would like to unsubscribe from this newsletter
                                please follow this link: <a href="http://goodwhitemail.com/material/40085/1000/2000/">here</a>. <br />
                                Mail to: goodwhitemailP.O Box 17598 #88657 Baltimore, MD 21297
</center>


</table>
<br/>
<br/>
<br/>
<br/>

</font></td>
</tr>
</table>
</td></tr>
</table>
</body>
<hr noshade="noshade" size="1"><p class="avgcert" align="left" color="#000000">No virus found in this message.<br>
Checked by AVG - <a href='http://www.avg.com'>www.avg.com</a><br>
Version: 10.0.1204 / Virus Database: 1498/3522 - Release Date: 03/22/11</p></html>


Frequent Visitor

Re: Comcast filters are chronically missing one prevalent type of spam

And a bankcard version too.

 

 

Return-Path: orchardbank@goodwhitemail.com
Received: from imta26.emeryville.ca.mail.comcast.net (LHLO
 imta26.emeryville.ca.mail.comcast.net) (76.96.30.79) by
 sz0015.ev.mail.comcast.net with LMTP; Tue, 22 Mar 2011 12:33:36 +0000 (UTC)
Received: from goodwhitemail.com ([31.148.248.86])
        by imta26.emeryville.ca.mail.comcast.net with comcast
        id NCZW1g01a1sbEH30SCZZJt; Tue, 22 Mar 2011 12:33:35 +0000
X-CAA-SPAM: F00000
X-Authority-Analysis: ??
From: OrchardBankMasterCard <orchardbank@goodwhitemail.com>
Subject: A MasterCard to Build Credit
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="iso-8859-1"
X-WhitelistID: 66fd41387f65e29954c663cf790e8a6e-46983
Message-ID: <0.0.E.750.1CBE86C654FA6A0.0@goodwhitemail.com>
Date: Tue, 22 Mar 2011 01:37:36 -0700
X-Antivirus: AVG for E-mail 10.0.1204 [1498/3522]
X-AVG-ID: ID4F795E0B-4EBBB6D5


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
            "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<title>goodwhitemail</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body bgcolor="#FFFFFF" link="#0066CC">


<table border="0" cellspacing="0" cellpadding="10" align="center" width=100%><tr valign=middle>
    <td align="left">
    </td>
    <td align="right">
    <br />
    </td>
</tr></table>


<table width="90%" border="0" cellspacing="0" cellpadding="1" align="center"><tr><td>
<table width="100%" border="0" cellspacing="0" cellpadding="5" align="center">
<tr valign="top"><td bgcolor="#FFFFFF"><font face=verdana,arial,helvetica size=1>
<br/>
<br/>
<br/>
<br/>
<p align="center"><b><font face="Verdana" size="2">
<a href="http://goodwhitemail.com/material/133179/46983/1006-008-0-2/" style="text-decoration: none">
<font color="#f36c0b"></font></a></font></b></p>
<p align="center">
<a href="http://goodwhitemail.com/material/133179/46983/1006-008-0-2/">
<img border="0" src="http://goodwhitemail.com/images/ormc1.jpg"></a><br>
<a href="http://goodwhitemail.com/material/40196/1000/2000/">
<img border="0" src="http://goodwhitemail.com/images/ormc2un.jpg"></a><br>
<a href="http://goodwhitemail.com/material/133181/1000/2000/">
<img border="0" src="http://goodwhitemail.com/images/ormc3no.jpg"></a><br>
<a href="http://goodwhitemail.com/material/133180/1000/2000/">
<img border="0" src="http://goodwhitemail.com/images/ormc4prv.jpg"></a><br>
</p>
                        <br />
<center>

                                If you would like to unsubscribe from this newsletter
                                please follow this link: <a href="http://goodwhitemail.com/material/40085/1000/2000/">here</a>. <br />
                                Mail to: goodwhitemail P.O Box 17598 #88657 Baltimore, MD 21297
</center>


</table>
<br/>
<br/>
<br/>
<br/>

</font></td>
</tr>
</table>
</td></tr>
</table>
</body>
<hr noshade="noshade" size="1"><p class="avgcert" align="left" color="#000000">No virus found in this message.<br>
Checked by AVG - <a href='http://www.avg.com'>www.avg.com</a><br>
Version: 10.0.1204 / Virus Database: 1498/3522 - Release Date: 03/22/11</p></html>


Problem Solver

Re: Comcast filters are chronically missing one prevalent type of spam

Hi BluesMa,

 

Thank you for these examples.

 

I have checked both the sending IP and the content, and we are currently filtering these as spam and blocking the sending IP's.

 

Thanks again,

 

Rob W

Comcast

Frequent Visitor

Re: Comcast filters are chronically missing one prevalent type of spam

this one for AT&T

 

 

 

Return-Path: attiphone@goodwhitemail.com
Received: from imta26.emeryville.ca.mail.comcast.net (LHLO
 imta26.emeryville.ca.mail.comcast.net) (76.96.30.79) by
 sz0015.ev.mail.comcast.net with LMTP; Tue, 22 Mar 2011 14:14:48 +0000 (UTC)
Received: from goodwhitemail.com ([31.148.236.66])
        by imta26.emeryville.ca.mail.comcast.net with comcast
        id NEEh1g04Y1Se94X0SEElEJ; Tue, 22 Mar 2011 14:14:47 +0000
X-CAA-SPAM: F00000
X-Authority-Analysis: ??
From: AT&T iPhone <attiphone@goodwhitemail.com>
Subject: $49 iPhone 3GS 8 GB
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="iso-8859-1"
X-WhitelistID: 1a52b8a4c55d8b3b3ee85ed0a719bbb9-46977
Message-ID: <0.0.E.BAD.1CBE86D321A3948.0@goodwhitemail.com>
Date: Tue, 22 Mar 2011 01:43:19 -0700
X-Antivirus: AVG for E-mail 10.0.1204 [1498/3522]
X-AVG-ID: ID4498BEF0-83978C1


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
            "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<title>goodwhitemail</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body bgcolor="#FFFFFF" link="#0066CC">


<table border="0" cellspacing="0" cellpadding="10" align="center" width=100%><tr valign=middle>
    <td align="left">
    </td>
    <td align="right">
    <br />
    </td>
</tr></table>


<table width="90%" border="0" cellspacing="0" cellpadding="1" align="center"><tr><td>
<table width="100%" border="0" cellspacing="0" cellpadding="5" align="center">
<tr valign="top"><td bgcolor="#FFFFFF"><font face=verdana,arial,helvetica size=1>
<br/>
<br/>
<br/>
<br/>
<p align="center"><b><font face="Verdana" size="2">
<a href="http://goodwhitemail.com/material/133243/46977/1006-008-0-2/" style="text-decoration: none">
<font color="#f36c0b"></font></a></font></b></p>
<p align="center">
<a href="http://goodwhitemail.com/material/133243/46977/1006-008-0-2/">
<img border="0" src="http://goodwhitemail.com/images/atip3g.jpg"></a><br>
<a href="http://goodwhitemail.com/material/10055/1000/2000/">
<img border="0" src="http://goodwhitemail.com/images/atip3gou.jpg"></a><br>
<a href="http://goodwhitemail.com/material/529922/1000/2000/">
<img border="0" src="http://goodwhitemail.com/images/atip3glg.jpg"></a><br>
<a href="http://goodwhitemail.com/material/867613/1000/2000/">
<img border="0" src="http://goodwhitemail.com/images/atip3gpp.jpg"></a><br>
</p>
                        <br />
<center>

                                If you would like to unsubscribe from this newsletter
                                please follow this link: <a href="http://goodwhitemail.com/material/40085/1000/2000/">here</a>. <br />
                                Mail to: goodwhitemail P.O Box 17598 #88657 Baltimore, MD 21297
</center>


</table>
<br/>
<br/>
<br/>
<br/>

</font></td>
</tr>
</table>
</td></tr>
</table>
</body>
<hr noshade="noshade" size="1"><p class="avgcert" align="left" color="#000000">No virus found in this message.<br>
Checked by AVG - <a href='http://www.avg.com'>www.avg.com</a><br>
Version: 10.0.1204 / Virus Database: 1498/3522 - Release Date: 03/22/11</p></html>


Frequent Visitor

Re: Comcast filters are chronically missing one prevalent type of spam

Now the whitemailonly has changed to goodwhitemail.com  I received 3 from him this a.m.