Receive up to $504 promo credit ($180 w/Welcome Unlimited, $360 w/ 5G Start, or $504 w/5G Do More, 5G Play More, 5G Get More or One Unlimited for iPhone plan (Welcome Unlimited and One Unlimited for iPhone plans can't be mixed w/other Unlimited plans; all lines on the account req'd on respective plans)) when you add a new smartphone line with your own 4G/5G smartphone on an eligible postpaid plan between 2/10/23 and 3/31/23. Promo credit applied over 36 months; promo credits end if eligibility requirements are no longer met.
We've been getting spam for months, sometimes 3 or 4 emails a day from this same spammer. It seems that they have a verizon account and are sending it through verizon.
I wrote to spamdetector.update about it but nothing has changed.
These are the headers:
X-Apparently-To: Wed, 22 Jan 2014 02:07:22 +0000
Received-SPF: softfail (transitioning domain of parth-valves.com does not designate 18.104.22.168 as permitted sender)
Authentication-Results: mta1010.vzn.mail.gq1.yahoo.com from=parth-valves.com; domainkeys=neutral (no sig); from=parth-valves.com; dkim=neutral (no sig)
Received: from 22.214.171.124 (EHLO vms172093pub.verizon.net) (126.96.36.199)
by mta1010.vzn.mail.gq1.yahoo.com with SMTP; Wed, 22 Jan 2014 02:07:21 +0000
Content-type: text/html; CHARSET=US-ASCII
Received: from parth-valves.com ([unknown] [188.8.131.52])
(Sun Java(tm) System Messaging Server 7u2-7.02 32bit (built Apr 16 2009))
with ESMTP id <0MZS00H9H5W3MF20@vms172093.mailsrvcs.net> for
21 Jan 2014 20:07:21 -0600 (CST)
Received: (qmail 76473 invoked by uid 57297); Wed, 22 Jan 2014 02:04:35 +0100
Date: Wed, 22 Jan 2014 02:04:35 +0100
Subject: Buy Cheap Meds. Save up to 71%. New 30 products. Deliver to your home.
Hello, CLICK HERE
Or Copy and Paste this Safe redirect Url into your browser:
If its a single spammer, you can write a rule. Verizon outsources it spam blocker (probably written by the outsource as well) and no one knows, who will say, how it works. Rarely do they seem to just use a spammers address, as most spammers are constantly changing or hiding that.
These spammers always have "medic.canada" as part of their email address.