This forum thread needs a solution.
Kudos0

Spam with no sender address

Posted: 20-Nov-2023 | 11:37AM · 8 Replies ·

Hi,

There is a new type of spam that can't be "marked as spam" because there is no sender address.

In the internet header for the message, it says the email is from "shipscodes.store" (shipscodes.store [185.252.24.101]).

How can I block it ?  Can Norton please update Antispam so that it spams this type of email automatically, please ?

Complete internet header (my email address is masked):

Return-Path: <SRS0=aeA1=HB=shipscodes.store=return@mx3.nameshield.com>

Delivered-To: (my email address)

Received: from localhost (localhost.localdomain [127.0.0.1])

                by mx3.nameshield.com (Postfix) with ESMTP id AF333286D44

                for <(my email address)>; Mon, 20 Nov 2023 15:56:56 +0100 (CET)

X-Virus-Scanned: Mx mail scanner

Received: from mx3.nameshield.com ([127.0.0.1])

                by localhost (mx-s3-nd.perf1.net [127.0.0.1]) (amavisd-new, port 10024)

                with ESMTP id miUgNAXvHH37 for <(my email address)>;

                Mon, 20 Nov 2023 15:56:54 +0100 (CET)

Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=185.252.24.101; helo=shipscodes.store; envelope-from=return@shipscodes.store; receiver=<UNKNOWN>

Received: from shipscodes.store (shipscodes.store [185.252.24.101])

                by mx3.nameshield.com (Postfix) with ESMTP id 5C32628560B

                for <(my email address)>; Mon, 20 Nov 2023 15:56:54 +0100 (CET)

Subject: =?UTF-8?B?Vm91cyBhdmV6IHJlw6d1IHVuIG1lc3NhZ2UgZHUgc2VydmljZSBjbGllbnQ=?=

To: <(my email address)>

From: Boulanger, support@shipscodes.store>

Content-Type: multipart/alternative; boundary="boundary_text"

Content-Disposition: inline

Content-Transfer-Encoding: 7bit

Date: Mon, 20 Nov 2023 14:46:56 GMT

List-Unsubscribe: <2986206118@shipscodes.store>

Message-Id: <2986206118-7687-2986206118@shipscodes.store>

Thanks in advance,

Eric

Labels: AntiSpam

Replies

Kudos0

Re: Spam with no sender address

Posted: 21-Nov-2023 | 10:10AM · Permalink

i have noticed these in past few weeks myself

seems to be a new form on how they spoof the header ( my opinion)

as to how to stop these i am not certain beyond reporting to the isp used

Kudos0

Re: Spam with no sender address

Posted: 21-Nov-2023 | 10:58AM · Permalink

I would like Norton to propose a way to deal with it.

After all, the sender information is in the internet header so Norton AntiSpam could deal with it.

So I would like to report it to Norton, but unfortunately Norton seem to have deleted the "help" and "contact us" functions even though Norton 360 is more and more expensive.

Kudos0

Re: Spam with no sender address

Posted: 21-Nov-2023 | 11:16AM · Edited: 21-Nov-2023 | 11:22AM · Permalink

MRSAWYER ERIC:

So I would like to report it to Norton, but unfortunately Norton seem to have deleted the "help" and "contact us" functions

Welcome to the Help Center!
https://support.norton.com/sp/en/us/home/current/help-center 


Norton Official Support is via Chat or Phone.  No Email support. 
Support request generates case number/identity verification code.
Chat Support offers save & print transcript. 

  ~ Contact Norton Official Support ~

Please review related posts in another thread:

Maybe, share your geo-location/country.  
Maybe, I can post Norton Official Support phone number, if you want? 

Norton Official Support via social media. 

Norton Official Support via social media pics.
https://community.norton.com/en/comment/8549426#comment-8549426 

Kudos0

Re: Spam with no sender address

Posted: 21-Nov-2023 | 11:40AM · Permalink

All: The object of these messages is, as we are seeing it to be, confusion. No sender address is presented so then, the hope is, that the receiver will click on a "unsubscribe link" provided. Which in turn will start malware downloads in the background. You can add these addresses to your spam list as shown below:

*@shipcodes.com and add *@shipcodes.store

This will route anything from those domains whether legit or not straight to the spam folder of your choice.

SA

MS Certified Professional : Windows 11 Home/Pro 22H2 x 64 build 22621.2715 / Windows 10 Pro x 64 version 22H2 / build 19045.3693 / Norton Security Ultra - Norton 360 Deluxe ver. 22.23.10.10 / Opera GX LVL5 (core: 104.0.4944.70) 64 bit-Early Access w/Norton Chrome Extensions
Kudos0

Re: Spam with no sender address

Posted: 22-Nov-2023 | 2:59AM · Permalink

Thanks for this info.
The first part (Help center) is not helpful at all (it's how I ended up here).
The othe rlinks look good :)

Kudos0

Re: Spam with no sender address

Posted: 22-Nov-2023 | 3:01AM · Permalink

Thanks.
This looks great. I will  try it if I can find out where the spam list is ;)

Kudos0

Re: Spam with no sender address

Posted: 22-Nov-2023 | 4:03AM · Permalink

ERIC SAWYER:

The first part (Help center) is not helpful at all (it's how I ended up here).

I hear ya'.  Norton suggested topics are not helpful when users want to Contact Norton Support. 

If the suggested topics do not help.  
My topic is not listed above =>
[Search for more solutions] => 
I still need help =>
Sign In =>
Chat Now =>
View Phone Number =>

Kudos0

Re: Spam with no sender address

Posted: 22-Nov-2023 | 1:20PM · Edited: 22-Nov-2023 | 1:24PM · Permalink

Eric. Assuming you use Outlook as in Office Outlook. In Outlook. These suggestions may help you decide how you wish to block these addresses. I suggest using your blocked senders list adding the two emails I posted earlier.

*@shipcodes.com and  *@shipcodes.store

https://support.microsoft.com/en-us/office/block-senders-or-mark-email-a...

Edited: The IP address you showed for this sender is registered in Ukraine as shown in this trace route:

https://www.ip-tracker.org/lookup.php?ip=185.252.24.101

SA

MS Certified Professional : Windows 11 Home/Pro 22H2 x 64 build 22621.2715 / Windows 10 Pro x 64 version 22H2 / build 19045.3693 / Norton Security Ultra - Norton 360 Deluxe ver. 22.23.10.10 / Opera GX LVL5 (core: 104.0.4944.70) 64 bit-Early Access w/Norton Chrome Extensions