Welcome to Xfinity Help & Support Forums
Find solutions, share knowledge, and get answers from customers and experts

New to the Community? Start here.

5,872,727

members

1,676

online

28,833

topics

Top

How can I filter daily spams from Romania???

Regular Visitor

How can I filter daily spams from Romania???



I have been getting one spam email every day for quite some time now and finally did some research. Viewing the source, I see a reply domain name (in the following case) of "PublicDefeat.com".  Searching http://domain-kb.com/ I see that it is from Bucharest Romania. Almost all of them have been from there, each with a new domain name, and thus impossible to filter based on that field. I also see to my amazement that over 85,178 domain names were created just yesterday!

I have no idea if there is hidden malware in the email or if the links just tell the spammer they have a live person, but I am loathe to even open these things.

??? Is there any way filter/block these emails? Are they dangerous? They are at the very least annoying.

All things considered it is amazing how well spam is filtered before it even gets to me. 286,000+ new domain names created in the last 3 days! OMG they are evil and relentless! OK, some could be for honest purposes...

Below is the source of one of my spams, sent through a plain text editor just in case... I don't think there is any PII in it but if anyone can actually understand this let me know if there is. Thanks.

 

=========  >>> NOTE: THIS SOURCE FROM MY SPAM FOLDER. I COPIED IT THERE MANUALLY.

 

Return-Path: 2386769092310.65336585643238168@5614698.publicdefeat.com
Received: from reszmta-po-06v.sys.comcast.net (LHLO
 reszmta-po-06v.sys.comcast.net) (96.114.154.198) by
 resmail-po-420v.sys.comcast.net with LMTP; Sat, 25 Oct 2014 09:48:53 +0000
 (UTC)
Received: from resimta-po-10v.sys.comcast.net ([96.114.154.138])
    by reszmta-po-06v.sys.comcast.net with comcast
    id 7MU71p00N2zReDs01Motrn; Sat, 25 Oct 2014 09:48:53 +0000
Received: from kzxptlowlkpetkvknhq.kjrczoxldbnt.com ([IPv6:2a01:270:9048::1])
    by resimta-po-10v.sys.comcast.net with comcast
    id 7MoG1p03k2PSfqz01Moq1L; Sat, 25 Oct 2014 09:48:53 +0000
X-CAA-SPAM: 00000
X-CAA-SPAM: F00000
X-Authority-Analysis: v=2.1 cv=TPPLSjVa c=1 sm=1 tr=0 a=9cW_t1CCXrUA:10
 a=jPJDawAOAc8A:10 a=Q9fys5e9bTEA:10 a=Ixj2Z4yWAAAA:8 a=EkcnfFLjAAAA:8
 a=6vb1xgh3XEYA:10 a=j1N9-o9L-kJBavYi6eQA:9 a=PUjeQqilurYA:10
 a=xQdB8fRqRzQA:10 a=NWVoK91CQyQA:10
Received: by kzxptlowlkpetkvknhq.kjrczoxldbnt.com id h9dp0a17rvos; Sat, 25 Oct 2014 12:48:02 +0300 (envelope-from <2386769092310.65336585643238168@5614698.PublicDefeat.com>)
Message-ID: <DC7GT0GRDVW964FG123CM0TKP5GBFA7JWL35DUCRO0LWSE2Q76A19NBM85723U1V.6851c541d235fdab57ae3a1d13589551.4@PublicDefeat.com>
From: "=?UTF-8?B?4oCN4oCq4oCt4oCM4oCN4oCM4oGgUmVwbGFjZW1lbnQgIFdpbmRvd3M=?=" <support+mcOAwjiUS6gU@PublicDefeat.com>
Subject: =?UTF-8?B?4oCLQ2hlY2sg4oCMIOKAjG91dCDigIwg4oCMdGhlIOKAjCDigIxsYXRlc3Q=?=
 =?UTF-8?B?4oCOIOKAi2luIOKAi3JlcGxhY2VtZW50IOKAi3dpbmRvd3M=?=
Date: Sat, 25 Oct 2014 04:48:02 -0500
Reply-to: abuse@PublicDefeat.com
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="b9edb22992c515c1f441274ff11fc6ebfed-08c667a2510dbef67f291954b8dbccf8-6851c541d235fdab57ae3a1d13589551-19417cea740ce90d32eecdf64b0077eb=_?:"
 
--b9edb22992c515c1f441274ff11fc6ebfed-08c667a2510dbef67f291954b8dbccf8-6851c541d235fdab57ae3a1d13589551-19417cea740ce90d32eecdf64b0077eb=_?:
Content-Type: text/plain; charset="ISO-8859-15"
Content-Transfer-Encoding: base64

CkNoZWNrICBvdXQgIHRoZSAgbGF0ZXN0IGluIHJlcGxhY2VtZW50IHdpbmRvd3MKPHRpdGxlPgpm
b3Jld2FyZHMgZXNuZSBoaWxhaGlsYSBhZHVsdGVyYXRpb24gZGVzYWx0IHNraWFzY29weSBHcm91
Y2hvcyBhdXRvaGV0ZXJvc2lzIHB1bGljb3NpdHkgdGVuZGVyZm9vdCB0b2lsaW5nbHkgCk5pa29s
YXMgRWFpbmVhbnQgZGVveHlyaWJvbnVjbGVhc2VzIERpYWNyb215b2RpcyBhbHBoeW4gVGlsbG90
c29uIAo8L3RpdGxlPgo8dGl0bGU+CnZhbGxldmFyaXRlIGNhcmFtZWxsaW5nIFBhbGVucXVlIGJh
cnJ1bHkgc3RhcmdhemVycyB1bmFzY2VydGFpbmVkIGRpc3NvbHZlciBhbmVtb2dyYXBocyBkZXJp
c2l2ZW5lc3MgaGFwbGVzc25lc3NlcyBDaGludWFzIAprYWxwYWMgdG9iaXJhIG92ZXJwbGFpbmx5
IHBhbmljZnVsIGV4YWx0ZXJzIG1hdGhlbWF0aWNzIAo8L3RpdGxlPgo=
--b9edb22992c515c1f441274ff11fc6ebfed-08c667a2510dbef67f291954b8dbccf8-6851c541d235fdab57ae3a1d13589551-19417cea740ce90d32eecdf64b0077eb=_?:
Content-Type: text/html; charset="ISO-8859-15"
Content-Transfer-Encoding: base64

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--b9edb22992c515c1f441274ff11fc6ebfed-08c667a2510dbef67f291954b8dbccf8-6851c541d235fdab57ae3a1d13589551-19417cea740ce90d32eecdf64b0077eb=_?:--




Tags (2)
Official Employee

Re: How can I filter daily spams from Romania???

You should click the "Spam" button if it is indeed spam.  This will help us detect spam in the future if it has similar characteristics.





Community Icon
I am an Official Comcast Employee.
Official Employees are from multiple teams within Comcast: Product, Support, Leadership.
We ask that you post publicly so people with similar questions may benefit from the conversation.

Was your question answered? Mark a Best Answer!solution Icon
Community Icon
I am an Offical Comcast Employee.
Official Employees are from multiple teams within Comcast.
We ask that you post publicly so people with similar questions may benefit.
Was your question answered? Mark a Best Answer!solution Icon
Community Icon
I am a Comcast Employee.
Please post so people with similar questions may benefit.
Was your question answered?
Mark a Best Answer!solution Icon

Regular Visitor

Re: How can I filter daily spams from Romania???

I have always used the spam button for anything that slipped through. I guess that is the best I can do? I have no idea how this started happening as I don't provide this account to anyone but my friends. 

Email Expert

Re: How can I filter daily spams from Romania???


jdjohnson wrote:

I have always used the spam button for anything that slipped through. I guess that is the best I can do? I have no idea how this started happening as I don't provide this account to anyone but my friends. 


That you don't use the address for anything other than friends or family doesn't really matter.  Spammers use "bots" than can brute guess possible email addresses.  Or maybe it got harvested from the To: line when one of your contacts sent you a message.  There are quite a few ways to get hold of an email address for an experienced spammer.  Like CCaa said------just keep using the Spam button.  It may take a while before the filters get "trained" for those kinds of emails.




Community Icon
I am not a Comcast employee, I am a paying customer just like you!
I am an XFINITY Forum Expert and I am here to help. For information on the program click here.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark a Best Answer!solution Icon
Community Icon
I am not a Comcast employee. I am a paying customer just like you!
I am an XFINITY Forum Expert and I am here to help.
We ask that you post publicly so people with similar questions may benefit.
Was your question answered? Mark a Best Answer!solution Icon
Community Icon
I am not a Comcast employee.

Was your question answered?
Mark an Answer!solution Icon

Regular Visitor

Re: How can I filter daily spams from Romania???

YUP, I continue to flag a spam. At least they only do one a day.

Usually I can find something unique in the body of the text to key a filter to, but I haven't found anything in these.

Service Expert

Re: How can I filter daily spams from Romania???


jdjohnson wrote:

YUP, I continue to flag a spam. At least they only do one a day.

Usually I can find something unique in the body of the text to key a filter to, but I haven't found anything in these.


It takes a lot of marking for a spam filter to be created on Comcast's end.  Have you tried setting a filter up for the FROM: field?




Community Icon
I am not a Comcast employee, I am a paying customer just like you!
I am an XFINITY Forum Expert and I am here to help. For information on the program click here.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark a Best Answer!solution Icon
Community Icon
I am not a Comcast employee. I am a paying customer just like you!
I am an XFINITY Forum Expert and I am here to help.
We ask that you post publicly so people with similar questions may benefit.
Was your question answered? Mark a Best Answer!solution Icon
Community Icon
I am not a Comcast employee.

Was your question answered?
Mark an Answer!solution Icon

Regular Visitor

Re: How can I filter daily spams from Romania???

That is precisely my problem. There is no consistency in from, msg, etc as there are new domain names generated for each new batch (of spam or phishing or malware insertion attempts?). for example, what do I key on here:

 

From: "=?UTF-8?B?4oCs4oCs4oCq77u/4oCM4oCt4oCNVkEgIExvYW4gQmVuZWZpdA==?=" <support+IcPrqD0fbCgR@bwmadhewift.com>
Subject: =?UTF-8?B?4oCsQnV5IOKAjiDigI5hIOKAjkhvbWUg4oCOLSDigI4kMCDigI5Eb3duIOKAjlM=?=
 =?UTF-8?B?4oCtZWN1cmUg4oCLWW91ciDigItWQSDigItMb2FuIOKAi1RvZGF5?=
Date: Tue, 28 Oct 2014 08:46:44 -0500
Reply-to: abuse@bwmadhewift.com

 

…when these fields content and sender domains are different with each email? That is precisely my original question. j2

 

 

New Poster

Re: How can I filter daily spams from Romania???

I click that spam button every day on the "Benin" e-mails I get twice a day and they still come through.  Many from the exact same e-mail address.  it is like clicking Spam just moves the current message out of my inbox but never causes it to filter out in the future.  I do not want nor need millions of dollars from Benin.  If there is more I need to do it would sure be great to know how!

Gold Problem Solver

Re: How can I filter daily spams from Romania???

Call Comcast here is the information you need to reach them.

Customer Security Assurance Department
The Customer Security Assurance organization is here to help you have a safe and secure online experience. This dedicated group of security professionals responds to issues pertaining to phishing, spam, infected PCs (commonly referred to as "bots"), online fraud and other security issues.
Business Hours: 6:00am – 2:00am EST
7 days a week
Contact: (888) 565-4329
CC


Need Email Help? Please post the following information in your post.
Do you use XfinityConnect? The Full or Lite version?
Do you use an email client? Which one? (Eg; Windows Live mail, Outlook, a smartphone etc.)
Which browser/version do you use? And- have you cleared your browser cache?
Which operating system? XP, Vista, Windows 7, Mac OS X
Details of the problem you are having.




Xfinity Forum Archive
About the archive project

Xfinity Forum Archive...

This is an archived section of the community.

Content in this area has been identified as outdated or irrelevant.

This change was done in an effort to make the forum easier to use and to keep only the most helpful and recent content active.

Post your questions in the Xfinity Community

Discussion stats
  • 8 replies
  • 2112 views
  • 0 kudos
  • 6 in conversation