Re: Finance / Tech spam

On 05-06-2025 18:53, Kirk Ismay wrote:
> I'm trying to find a way to reduce a certain kind of spam that uses 
> sensational finance / technology subject lines.  Typically Elon, Trump, 
> Tesla etc.   It often slips through my ruleset. I've tried to create 
> local email and domain blocklists, as well as keyword rules based on the 
> mailing address in the body. Everything changes too frequently to be 
> able to keep up.  They're using commercial email services like MailGun, 
> SendGrid, or Salesforce. None of the users I  talk to have subscribed to 
> this sort of thing, and yet it's not all users that get this.
> 
> Any suggestions would be helpful!
> 
> Thanks, Kirk
> 
> Here are some sample subject / senders:
> 
> From: "Derek Langford | TVI" <[email protected]>
> Subject: Holy Grail of dividend stocks
> 
> From: "Cybertruck Stunt Video | 1st Market Leader" 
> <[email protected]>
> Subject: Watch Demo: Elon Musk’s New $9 Trilli
> 
> From: "Trump's Loophole Exposed | Chris Archer from CCA" 
> <[email protected]>
> Subject: Elon’s IRS Attack Just Exposed a Trum
> 
> From: "Tesla Attack Exposed  [Alan Brooks from SWP]" 
> <[email protected]>
> Subject: 🔴 Tesla Cybertruck Explosion: The Hi
> 
> Subject: This Tiny AI Firm Could Be Musk’s Real Play
> From: Musk’s Hidden Play — Daniel Brown | GM He
> 
> Subject: Collect Thousands Monthly Without Paying Taxes!
> From: "Social Security Check - William Carter [FMT]"
> 
> From: "Musk Stepping Down - Jacob Walker @ FMP" 
> <[email protected]>
> Subject: Trump and Musk at Odds: Financial Chaos Could Destroy Your 
> Retirement!
> 
> From: Trump’s crypto explosion, Emily Howard |
> Subject: BREAKING NEWS: Trump’s crypto venture
> 
> From: "\"Elon sounds the alarm, Amanda S. From RITF\""
> Subject: Elon Warns: Exec Order 14024 Targets Dollar
> 
> From: "Trump's Loophole Exposed | Chris Archer from CCA" 
> <[email protected]>
> Subject: Elon’s IRS Attack Just Exposed a Trum
> 
> From: "Musk Stepping Down - Jacob Walker @ FMP" 
> <[email protected]>
> Subject: Trump and Musk at Odds: Financial Chaos Could Destroy Your 
> Retirement!
> 
> Subject: Collect Thousands Monthly Without Paying Taxes!
> From: "Social Security Check - William Carter [FMT]"
> 
> Subject: This Tiny AI Firm Could Be Musk’s Real Play
> From: Musk’s Hidden Play — Daniel Brown | GM He
> 
> From: "Tesla Attack Exposed  [Alan Brooks from SWP]" 
> <[email protected]>
> Subject: 🔴 Tesla Cybertruck Explosion: The Hi
> 
> From: "Derek Langford | TVI" <[email protected]>
> Subject: Holy Grail of dividend stocks

Hi,

I see some patterns like the recurring pipe and dash characters in From 
lines. But maybe you can share a few full messages with headers? Maybe 
there are easier ways to whack this mole.

Kind regards,
Tom