07 September 2019

Uncommonly persistent spam from deltrino.duckdns.org

 
My personal email (not the one associated with this blog) has been swamped in recent weeks by a torrent of spammy emails.  Nothing dangerous or ominous as far as I can see.

All of them come from a single source: deltrino.duckdns.org, and for reasons I don't understand my Earthlink system does not allow emails from this source to be flagged as spam.

Obviously my email address got into this company's database.  IIRC, the same thing happened to me many years ago and I was able to escape, but I don't remember how.

Have any readers experienced the same problem?  Can anyone offer a suggested remedy?

22 comments:

  1. on the infected system, you might try clearing your browser history of everything?

    I-)

    ReplyDelete
  2. "duckdns" is a service that lets you point a sub domain at an IP address, so allowing you to eg run an email server from your home internet without having to pay for a fixed IP address. You probably can't block duckdns because it would potentially block other benign uses.

    Using a sledgehammer to crack a nut, and you probably don't want to do this if you're using Earthlink, but you could use Gmail as your mail client, get it to fetch your Earthlink mail but create a rule within Gmail to filter anything mentioning "deltrino", mark it as read and automatically delete it.

    Earthlink may already allow you to create rules like that - I dunno. In fact the email client you already use probably lets you do something similar. I only mention Gmail because it's what I've been using for years and I know how flexible it is.

    ReplyDelete
  3. a quick googling shows that that is a spam site. also, this might help: https://www.earthlink.net/protecting-yourself-from-spammers/ and https://www.earthlink.net/wp-content/uploads/webmail/help/earthlink/en_US/spamblocker/protection.html

    I-)

    ReplyDelete
  4. You could set up a filter for "from:*@*duckdns.org" with a rule to "mark as read, put into trash" or something like that.

    ReplyDelete
  5. Hey there, Something very similar happened to me several weeks ago on earthlink. It was infuriating, a lot of erectile dysfunction ads, (not appli-
    cable) and others including tiny air conditioners. I just kept flagging them
    as spam for a couple of weeks and recently noticed that they have stopped. I
    also tried the "feedback" portal. dianadragon

    ReplyDelete
  6. Just a thought.... Move your email to yahoo email, which allows you to sort by sender (gmail and others may do the same), then see if you can flag it as spam. It's a bummer, but that's the nature of our times. OR, conversely, you might contact your own email provider (you probably already have) to see if they can tell you how to flag it as spam. OR...you can just sort them together and delete them. OR...you might send a reply that says "Please take me off your recipient list. Thank you." Sometimes that actually works.

    ReplyDelete
    Replies
    1. I'll try your suggestion to unsubscribe. I normally avoid hitting that link on emails because it alerts the bot that it has found a real email address, but in this case I have nothing to lose in that regard.

      Delete
  7. I work in the corporate anti-spam industry. As someone mentioned already, duckdns.org's only purpose is to allow anyone to set up their own email (or other type of) server without purchasing a static IP address. Spammers aren't likely to set up their own email server using that service, but a lot of unknowledgeable tinkerers are. It's their unprotected mail servers that are the problem. The server at deltrino.duckdns.org is probably compromised and its owner doesn't even know it.

    Earthlink should definitely NOT safelist that domain. That's malpractice. If anything, mail from that domain should automatically raise suspicion. Also, Earthlink is unlikely to take action unless they get a ton of complaints. Don't bother using the unsubscribe link. It won't hurt, but it won't help in this case. Your best bet is to set up a rule in your email client, as someone else described, to discard all mail from that domain. The chance of any legitimate message coming from there is miniscule.

    ReplyDelete
  8. I use Earthlink Webmail and added deltrino.duckdns.org to blocked domains. Go to Spamblocker (edit). Choose "Settings" on next screen. Go to "Blocked Sender List" and add deltrino.duckdns.org to blocked sender or domain.

    ReplyDelete
    Replies
    1. I believe that may be the way I solved the problem when it first occurred years ago. But my "blocked senders" list is limited to 500 entries, so I have probably emptied that category a couple times since then. I've just added the duckdns to the list. Fingers crossed. And a huge thank-you if it works.

      Delete
    2. Using Earthlink "Blocked Sender List" doesn't stop deltrino.duckdns.org.

      Delete
  9. It wont work blocking no-reply@deltrino.duckdns.org in the Earthlink Spam blocker. I have added and confirmed it has been added and I continue to receive the emails daily, up to 30. I have added a rule in my Outlook to filter to my delete folder. This is the 1st spam that I have received that I have been unable to block through Earthlink.

    ReplyDelete
  10. I have been inundated with garbage from this address. I just created a rule in Outlook to delete anything from @deltrino.duckdns and just duckdns in the sender. At least that works for my computer. It's really obnoxious.

    ReplyDelete
  11. Earthklink help told me the deltrino.duckdns.org problem was at my end and try to sell me Norton to get rid of it.

    ReplyDelete
  12. i just added no-reply@deltrino.duckdns.org, deltrino.duckdns.org, and duckdns.org to my blocked sender list. I'll see if it does any good. I'm getting as many as 50 emails a day from this address.

    ReplyDelete
  13. My flood of spam emails has stopped.

    I can't say for sure which intervention stopped them. I did take a chance and sent a "reply" to several of them by clicking on the "don't send more emails" box. I also manually added the duckdns to my list of blocked senders when I couldn't do it automatically.

    ReplyDelete
    Replies
    1. I added deltrino.duckdns.org to my Webmail Earthlink Blocked Senders List about 3 weeks ago and they stopped. Weekly, I get a digest summary of blocked emails from domains I've entered that show they are sending them yet, but I don't see them in my client:

      Blocked Sender List « Back to Preferences
      Enter addresses or domains that you do not want to receive email from. This list is limited to 500 entries.

      Note: The Blocked Sender List is not intended for blocking specific spam senders. Although domain blocking may be effective in some cases, spammers change email addresses frequently, making specific address blocking ineffective. spamBlocker's Suspect Email Blocking feature is a much more effective way to block general spam.

      Messages from senders on this list:
      • Are immediately deleted.
      • Do not receive Allowed Sender Request forms.

      To unblock an address or domain, select it in the box and click Unblock Sender(s

      Delete
  14. I suggest to send an e-mail to abuse@duckdns.org reporting these domains sending spam messages.

    ReplyDelete
  15. Before this recent spate of spam from deltrino.duckdns.org, marinabaara.duckdns.org was the source of profuse spam. But earthlink provides an easy solution. On earthlink webmail, I added the entire domain name duckdns.org to my spam filter using SpamBlocker (near bottom of email folder list) - Settings - Blocked Sender List - Save - Save Changes. This works to block those deltrino.duckdns.org or any email sender ending in duckdns.org. I then monitor the daily spam email report from earthlink to ensure I've gotten no legitimate duckdns.org emails (I never have). If there were a legitimate duckdns.org email, I would have to get more specific with the domain I add to my Blocked Sender list.

    ReplyDelete
  16. What I do with earlink, that works with some domains they say thay can't flag, but not others, is to go into their webmail "Preferences", where you will then get a page of choices, one of which allows you to manually list domains you want blocked. Enter just the domain, duckdns.org ...that's it.

    Note that the name "deltrino", positioned before duckdns.org, is called a subdomain, and while "deltrino" is the most prolific of those spam subdomains, it's often not the only one.

    Good luck.

    ReplyDelete
  17. I, too, have successfully used my earthlink spam blocker to block the entire domain duckdns.org, since I get a tremendous amount of spam from them as well (deltrino and also marinabaara). I just went into Spamblocker/Settings/Blocked Senders List, and blocked the whole duckdns.org domain. I see the emails in a weekly digest earthlink sends me, and as far as I can tell there has never been a non-spam email that was blocked.

    ReplyDelete
  18. I have the same, one thing I've noticed about entering a blocked domain in earthlink's blocked sender list is that I have FORGOTTEN to click the SAVE before exiting. The reason i comment on this is because when you type in the domain and click the button to "block this domain", the address is cleared from the input box and appears in the existing list of addresses - and that seems like it's done, right? -nope-! STILL have to click SAVE at the bottom right of the window.

    ReplyDelete