some are from goodtastestories and have no message just a link
others are from sender aativamail.com that do show a message but no link
Looking at the headers, the format is the same for both senders with similar header content, so they are by the same author but no readable text message shown In the body, yet the aativamail.com does show readable messages.
I have never seen this before, where text in the body is not shown in the header unless the text is also remote content?
The sender address is spoofed so, probably sent via an smpt relay or a spambot.
The source changes every time so is probably via spambot/botnet.
from- pretty,girl.lotte,eva,emma, julia., dating1
subjects are- good day, greetings, I like you, hello there, I am bored, I am in love, I want XXX, hallo
I also have one from another source different which is similar to the Canadian pharmacy spam where it is addressed to a list of 5 people all with ntlworld.com addresses, that particular spammer has been sending for a few years. Strange they do not us blind copies but put all the names in the TO header, most spammers use bcc.
The code used in some of these emails may contain remote content, attachments,downloads, links and look to be by a hacker after data or trying to deliver malware, and they may bypass text only views if you forward them or click on anything.
virgin is tagging all these as spam which is excellent.
I will continue to ignore these dangerous emails which have suddenly started since 15/2/2021
Spam/scam emails are very complicated and some have remote content which can be dangerous, I make sure that html, images and graphics are not ticked in email setting , in fact the only one I tick is show read receipts.
mail Display (settings)
Allow HTML formatted email messages
Allow pre-loading of externally linked images
Display emoticons as graphics in text email messages
Colour quoted lines
Use fixed-width font for text email messages
Show requests for read receipts
Looking at older emails from 2020 the techniques used in the header code is very similar, sometimes the email message is just a block of random text which is odd and is "Content-Transfer-Encoding: base64" (as in goodtastestories.com dating emails)
I still get these ( aativamail.com yesterday-often repeated) but they are tagged spam so to be ignored, they have been reported to action fraud but "not stopped", some can contain images.
To be honest, the main thing agencies such as Action Fraud or The National Cyber Security Centre should be focused on is to engage with the relevant hosting authorities to get any malicious links that get reported closed down at the earliest opportunity. Closing down those links prevents more potential victims from being scammed although of course the scammers can still open new ones.
Expecting them to stop new phishing / scam email messages being sent is very optimistic for the reasons you give in your post.
As an aside, I don't use Virgin Media email for many reasons. I do have an ntlworld.com address and a virginmedia.com address but I only use them for testing purposes when helping on this forum.
Up until a few months ago both those accounts received zero spam. However, now the ntlworld.com address gets a steady trickle of aativamail.com and goodtastestories.com emails but none from elsewhere. The VM spam filters do catch them though. 👍
******************************* I am just another Virgin Media customer. If someone posts a useful reply you can say thanks by clicking on the thumbs up sign in their post. If someone posts a message that solves your problem it helps everyone if you mark their post as a Helpful Answer