Spam from telkomza.net address and poor voice quality

Since 19th February the following email has been sent to my inbox between 1300 and 1900 times a day:

[COLOR=""]I am pleased to inform you that WEST AFRICA in conjunction with Oxfam GB awarded you a cash grant of (ONE MILLION POUNDS) in
our Rural Development Program. For further details reply ASAP.
E-mail[email protected]
Cordially,
Kindly contact me for further details +2348106467540

Mr.Laure Norman

Claims Agent
Oxfam Program

This comes from an email address "[email protected]"

I called Telkom at the end of Feb and after 75 mins on the phone, found someone who knew what SPAM meant. However, the voice quality of the call was so poor and distorted that we could barely make out what each of us was saying.

I was told to forward this email to [email protected] but despite sending this email 9 times since 1st April, I have had no reply and the spam email keeps coming.

Due to this volume my inbox is full. Adding this address and title to the blacklist has no effect. My ISP advises that there are subtle changes to the origin email that defeat the block

That is not from Telkom
Go to file
properties
general
details
and you will see where it is coming from if you are using outlook
I had the same emails they were coming from Gmail
"[email protected]" this is just the heading
I sent them a nice mail telling them to fsk off and blocked them

In this week I also reported a similar case to the Telkom Crime line.

I had a look at the message origin and could not spot the source. What should I be looking for please?

Spam filter?

Its stupidly easy to forge the From Message Details.

Look at the message headers for the true source. Here's some spam I got the other day, you want to look for the very first (at the bottom) "Received: from" - that's where the Spam first left a computer / server. In this case, "Received: from [46.166.136.10] port=2560 helo=User) by server.daddyfishstore.com"

It's "daddyfishstore.com" (or whomever hosts that domain) that you unleash your fury onto.

Return-path: <[email protected]>
Envelope-to: <removed>@mweb.co.za
Delivery-date: Fri, 20 Apr 2012 11:17:45 +0200
Received: from prewall11.smp.mweb.co.za ([196.28.77.221])
by mailstore-19.smp.mweb.co.za with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1SL9yL-0002RD-E9; Fri, 20 Apr 2012 11:17:45 +0200
Received: from viruswall02.smp.mweb.co.za ([196.28.77.22] helo=postwall24.smp.mweb.co.za)
by prewall11.smp.mweb.co.za with esmtp (Exim 4.77 (FreeBSD))
(envelope-from <[email protected]>)
id 1SL9yL-000ODY-C0; Fri, 20 Apr 2012 11:17:45 +0200
Received: from postwall24.smp.mweb.co.za (postwall24.smp.mweb.co.za [196.28.76.44])
by viruswall02.smp.mweb.co.za (esets_smtp); Fri, 20 Apr 2012 11:17:44 +0200
Received: from [184.107.154.106] (helo=server.daddyfishstore.com)
by postwall24.smp.mweb.co.za with esmtp (Exim 4.77)
id 1SL9yK-000MVN-QM; Fri, 20 Apr 2012 11:17:45 +0200
Received: from [46.166.136.10] (port=2560 helo=User)
by server.daddyfishstore.com with esmtpa (Exim 4.77)
(envelope-from <[email protected]>)
id 1SL9xs-0006ch-B3; Fri, 20 Apr 2012 05:17:17 -0400
Reply-To: <[email protected]>
From: "AWARD"<[email protected]>
Subject: Re:rsend ur winning details
Date: Fri, 20 Apr 2012 10:17:11 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.daddyfishstore.com
X-AntiAbuse: Original Domain - mweb.co.za
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - yahoo.com
X-Spam-Status: No score= tests=
X-Postwall-Hash: 916e708db569059a47bf267ea1b504ad
X-EsetId: 42D63A233FB4123112916B

chrisc4290 said:

This comes from an email address "[email protected]"

I was told to forward this email to [email protected] but despite sending this email 9 times since 1st April, I have had no reply and the spam email keeps coming.

Click to expand...

Who gave you this address? The correct address for reporting SPAM is [email protected] . You won't get an automated reply from this address (as we get large amounts of mail, and don't want to contribute to SPAM by creating backscatter spam), but you should get a notification when the issue is addressed. A ticket will be created, and if it is not resolved promptly, PM me the email address you used to send the mail, and I will be able to lookup the ticket and check up on its status.

Please remember to forward the full email with all headers, (best done by forwarding as an attachment, if your mail client supports it), as we need all the headers to investigate it correctly.

I am actually using this method to report our spamming customer to the abuse team, and I have received email notifications that they have taken action regarding the customer on the past 5 or so occasions in the last month.

I am not aware of any other official address that is more appropriate for addressing this issue.

Due to this volume my inbox is full. Adding this address and title to the blacklist has no effect.

Click to expand...

Ouch.

My ISP advises that there are subtle changes to the origin email that defeat the block

Click to expand...

Ouch.