On Fri, 20 Nov 2020, Kevin A. McGrail wrote:
Philipp are these spam using things like Google forms for spam? If so, take a look at KAM.cf on mcgrail.com, we've added a number of rules to combat those recently.
There are also Google Docs rules in the base ruleset that should catch that.
Based on the sample that was posted, it looks to me like abuse of a web-based feedback form - post a spammy feedback using the email address of your victim and you spam the victim via the confirmation (and the domain hosting the feedback form at the same time).
-- John Hardin KA7OHZ http://www.impsec.org/~jhardin/ jhar...@impsec.org pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- Maxim I: Pillage, _then_ burn. ----------------------------------------------------------------------- 174 days since the first private commercial manned orbital mission (SpaceX)
