Anyone else having issues with spam showing up in the Xtra Webmail inbox?

Forums › Spark New Zealand › Anyone else having issues with spam showing up in the Xtra Webmail inbox?

1 | ... | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20

3508 posts

Uber Geek

# 2038828 16-Jun-2018 20:19

GEOMAX
I thought spark had fixed it or the spammer had decided to leave me alone.

but looking.. Air NZ book a seat has not appeared in my spam. Normally this can be identified by the ID in the headers from address in the bit before the .nz etc. Can you supply plus the date? the last ANZ I received was two days ago.

Trademe headers from address spam stopped about a week ago but always had a country code other than .NZ

freshbook.com is all news to me. Could not find anything in google. Can you confirm info is from xtra web mail site and you are on windows 10 and your email client?

Err I think you misunderstood. He has described legitimate sources that have been binned due to server side filtering getting it wrong. Nothing to do with source domains and any association with being a .NZ or attempting to appear legit from non .NZ domains. Nor is he pointing out actual spam others may be seeing for you to compare with.

It doesn't make a difference in the world of spoofing capabilities for you to search for .NZ specifically or otherwise.

The domain be supplied sends out invoices from an accounting firm. Legitimate. That are being flagged as spam when they are not. https://www.freshbooks.com

GEOMAX

450 posts

Ultimate Geek

# 2038829 16-Jun-2018 20:22

I will wait for his reply.

Oblivian

3508 posts

Uber Geek

# 2038836 16-Jun-2018 20:29

GEOMAX:
I will wait for his reply.

There's nothing to reply? You won't have the same emails to compare unless you also subscribe to air New Zealand alerts, or get fresh books to do your accounting.

He wasn't reporting spam. He was reporting falsely flagged spam.

GEOMAX

450 posts

Ultimate Geek

# 2038838 16-Jun-2018 20:34

Oblivian:
GEOMAX:

I will wait for his reply.

There's nothing to reply? You won't have the same emails to compare unless you also subscribe to air New Zealand alerts, or get fresh books to do your accounting.

He wasn't reporting spam. He was reporting falsely flagged spam.

I repeat...I will wait for his reply

Oblivian

3508 posts

Uber Geek

# 2038849 16-Jun-2018 20:49

Let me hilight some key phrases in the post to re-evaluate what you have asked of.

Lots of genuine mail from genuine NZ companies and genuine mailing lists in the spam folder.

All legit (i checked the links by hand).

filters are hitting Nz businesses very very hard

GEOMAX

450 posts

Ultimate Geek

# 2038862 16-Jun-2018 21:03

I am watching the football which is 26 6.

I regularly receive calls about email spam.

If it from trademe.

my question is...do you use xtra mail for trademe..answer is usually no I use gmail or whatever.

for AIR NZ...does the from address start with info@...

go figure..

back to the football still 26 6.

tdgeek

18746 posts

Uber Geek

Trusted

# 2038991 17-Jun-2018 10:15

One person supports this post

I finding it to be improved. I am getting less of these and my sam folder is getting more. Iv been marking them and dealing with the odd false positive, and right now its gone from the daily ritual to occasional

nunz

1410 posts

Uber Geek

Subscriber

# 2040052 18-Jun-2018 21:26

GEOMAX:

nunz:

eracode: These spam emails that appears to be from legit NZ companies - Briscoes, Mitre 10, Whitaker’s, etc - has anyone seen some that appear to be from IRD?

I have received some that look fairly convincing but TBH I’m not sure if they’re really from IRD - but obviously haven’t actioned in any way.

Was at a clients yesterday. Lots of genuine mail from genuine NZ companies and genuine mailing lists in the spam folder.

Air NZ Book A Set, Wine Lists, Trademe (legit), Grab One and a few others. All legit (i checked the links by hand). It seems the filters are hitting Nz businesses very very hard. I am seeing it happen to my clients and myself - and we have proper SPF, DMARC, Reverse IP, known fixed IP, high trust scores etc. Not in any black lists.

Freshbooks.com - most emails from there end up in the spam bin - which makes running an online accounting / invoicing package via them hard.

I thought spark had fixed it or the spammer had decided to leave me alone.

but looking.. Air NZ book a seat has not appeared in my spam. Normally this can be identified by the ID in the headers from address in the bit before the .nz etc. Can you supply plus the date? the last ANZ I received was two days ago.

Trademe headers from address spam stopped about a week ago but always had a country code other than .NZ

freshbook.com is all news to me. Could not find anything in google. Can you confirm info is from xtra web mail site and you are on windows 10 and your email client?

My client was missing emails so logged into her online email to check it. My invoice was in the spam bin - it come direct from freshbooks.com, which is one of the larger online invoicing systems. Had to code it as trusted to get through to inbox.

The others were all in the last week.

Client running Windows 7 and thunderbird. All spam caught at the server and never shows in TB as pop3 doesn't download the spam folder.

nunz

GEOMAX

450 posts

Ultimate Geek

# 2040102 18-Jun-2018 22:46

nunz:

GEOMAX:

nunz:

eracode: These spam emails that appears to be from legit NZ companies - Briscoes, Mitre 10, Whitaker’s, etc - has anyone seen some that appear to be from IRD?

I have received some that look fairly convincing but TBH I’m not sure if they’re really from IRD - but obviously haven’t actioned in any way.

Was at a clients yesterday. Lots of genuine mail from genuine NZ companies and genuine mailing lists in the spam folder.

Air NZ Book A Set, Wine Lists, Trademe (legit), Grab One and a few others. All legit (i checked the links by hand). It seems the filters are hitting Nz businesses very very hard. I am seeing it happen to my clients and myself - and we have proper SPF, DMARC, Reverse IP, known fixed IP, high trust scores etc. Not in any black lists.

Freshbooks.com - most emails from there end up in the spam bin - which makes running an online accounting / invoicing package via them hard.

I thought spark had fixed it or the spammer had decided to leave me alone.

but looking.. Air NZ book a seat has not appeared in my spam. Normally this can be identified by the ID in the headers from address in the bit before the .nz etc. Can you supply plus the date? the last ANZ I received was two days ago.

Trademe headers from address spam stopped about a week ago but always had a country code other than .NZ

freshbook.com is all news to me. Could not find anything in google. Can you confirm info is from xtra web mail site and you are on windows 10 and your email client?

My client was missing emails so logged into her online email to check it. My invoice was in the spam bin - it come direct from freshbooks.com, which is one of the larger online invoicing systems. Had to code it as trusted to get through to inbox.

The others were all in the last week.

Client running Windows 7 and thunderbird. All spam caught at the server and never shows in TB as pop3 doesn't download the spam folder.

I see your client was using windows 7 another post not using windows 10 had similar problems. A friend with windows 7 had an identical trademe email to me. Mine came through direct to me via inbox in webmail. His went to spam in webmail but had no not spam button to change it. Told him to report to xtra. Does other email from freshbook.com get through to a directly connected windows 10 PC.

Oblivian

3508 posts

Uber Geek

# 2040127 19-Jun-2018 00:51

GEOMAX:

I see your client was using windows 7 another post not using windows 10 had similar problems. A friend with windows 7 had an identical trademe email to me. Mine came through direct to me via inbox in webmail. His went to spam in webmail but had no not spam button to change it. Told him to report to xtra. Does other email from freshbook.com get through to a directly connected windows 10 PC.

*blink*

SERVER side webmail filtering - the mail is sitting in storage whether someone even polls for it or not, well before you start typing www.xtramail.. it has either been flagged/moved into the <spam> folder. Or not, so sitting in Inbox. Visiting the webpage with a different OS on a PC doesn't magically make it get filed to a different folder as you login. (happy to be proven wrong here..)

(but 10,000 emails may get delivered before it catches on and starts intercepting it varying who does/does not get delivery of known spam..)

Theoretically the only thing that can move but not flag, is polling or opening a client app on a mobile or PC, and even then only particular methods of check-before-retrieval (client spam-check check via IMAP and auto filing, much like a reconfigured Thunderbird can do) could/would..

GEOMAX

450 posts

Ultimate Geek

# 2040283 19-Jun-2018 10:09

all very interesting but why do some have missing icons and mixed up files?

I know that what appears on the webmail is supposed to be the same for everybody. My observation is that some non windows 10 PCs owners have extra folders which came from yahoo ? Just asking is OS an issue?

BlakJak

731 posts

Ultimate Geek

Trusted

# 2041528 21-Jun-2018 09:51

GEOMAX:
all very interesting but why do some have missing icons and mixed up files?

I know that what appears on the webmail is supposed to be the same for everybody. My observation is that some non windows 10 PCs owners have extra folders which came from yahoo ? Just asking is OS an issue?

how does the client-side operating system impact on what's happening on the server? :o

Seriously, I could use an email program sitting on an Amiga 500 and my email would be the same email.

No signature to see here, move along...

GEOMAX

450 posts

Ultimate Geek

# 2043113 24-Jun-2018 12:07

where to start...

you originally said..spam is here to stay ..if you don't like it leave!

some may have taken your advice and left spark .

meantime you dont answer questions but are scornful of enquiring questions.

I think Spark appear to have made good progress so why do you say spam is here to stay?

lisati

60 posts

Master Geek

# 2043172 24-Jun-2018 16:50

Received an odd one today. At first sight it appeared to be one from Spark advising me that my mailbox was temporarily disabled due to being 90% full, neither of which appear to be the case. Further digging around revealed it to be likely to have arrived from another Xtra account via webmail - if not, it was a pretty clever forgery. Buried towards the end of the email was what appeared to be a quote of a Ticketek promotion.

In the absence of information to the contrary, I'm suspecting either a practical joke, a compromised machine, or a compromised account.

GEOMAX

450 posts

Ultimate Geek

# 2043178 24-Jun-2018 17:18

saw a similar one on facebook which turned out his blocked sender list was 90% full. Cant remember how many you can have.

1 | ... | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20