Glad to hear something is being done on it, but...
(Quickly checks the spam folder.. )
Still coming in.. Netflix Phish for instance.. Seems like they are now
just using the same method, but with slightly more obfuscated From
friendly names..
Always nice when the spammers add email addresses belonging to a company
involved in spam protection ;)
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: (qmail 42345 invoked from network); 19 May 2020 21:38:26 -0000
Received: from wrqvffcz.outbound-mail.sendgrid.net (HELO
wrqvffcz.outbound-mail.sendgrid.net) (149.72.255.206)
by be.cityemail.com with (AES256-GCM-SHA384 encrypted) SMTP
(122e7fd2-9a19-11ea-9d07-b37be4431ee5); Tue, 19 May 2020 14:38:26 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sendgrid.net;
h=content-type:from:mime-version:reply-to:to:subject:list-unsubscribe;
s=smtpapi; bh=v4zCQ3e2LEzO09v9KYrxQ+hDECIEspkidVw61CfRAnc=; b=ZE
3e/kRdCnB2n78B0ELnlLRlf02uoioD6dvyULWg5d71nxNlxpJr01sTCSw/6TIRQj
/h/mdKKR7QIvmJaa0j9ydWNaScS9it6EUz/VuwAx8wVvLR7mO5QSrg8G8UernGWO
bvpgauvq3uR5M7hyvTq11wYS3H+GfjbLHcPFbHVfw=
Received: by filter0857p1iad2.sendgrid.net with SMTP id
filter0857p1iad2-14214-5EC451D0-6
2020-05-19 21:38:24.281488619 +0000 UTC m=+338595.871356810
Received: from MTYyNTUwMjA (unknown)
by ismtpd0051p1iad1.sendgrid.net (SG) with HTTP id
5AhElBMwQAeStnVlrMsBXA
Tue, 19 May 2020 21:38:24.175 +0000 (UTC)
Content-Type: multipart/alternative;
boundary=13aa6f58effcabc0298a9a708c5d7ac0dbf86df5ee8650b564ddc57776a7
Date: Tue, 19 May 2020 21:38:25 +0000 (UTC)
From: "NETFLlX" <[email protected]>
Mime-Version: 1.0
Reply-To: [email protected]
To: [email protected]
Message-ID: <[email protected]>
Subject: Please Verify Your Account
List-Unsubscribe:
<mailto:[email protected]?subject=https://u16255020.ct.sendgrid.net/wf/unsubscribe*q*upn=zxgg1V1rOEkx11H7u0uAgwIlbJLDbLuLmd-2BRxbuQPR-2Flxs5EhC2olvdhE1Wqx-2BN6pnT6eAXwAlBDpiIrNolqZcnEO-2F5gNWIQZPq8XOO54UHTjnLl64bUbkxgIPGR5t45OrWQjIFqgZywhq48j5xsNS9xmD7qJOQW22ovwWoby5CAsHn9JqP0EyXt5Oo9RQ5a2PdCg60l4QO0TlCA7oxTFw-2Ff5ssFZ9LdneA9xpMfBPkpi14XfRhM4CY57OXjDKUnoR7xqyb-2BkcHuxeqV-2F1o1NQq-2BEQioYY8O4rmFXcMtQPD5hVnCfDxZULPNE-2FCU5-2FRC0sn7FmxkNAHz5KWsh-2BfS1z91USmKkLYuPO6SYUouHGf-2BVmqbbzFwRAJbTKaS89uGI0QFE8tthRSOll5X-2BfLiBBgus4GiDNZgE3YelVwjkbbNG43OJipdRFoqyldT6NX2eqgMhr2ZGH7yNqa-2BXCUljW1N-2B2Tl1l8H05RlH2UIfQQdkuNeqoZq9jK00Kn-2Biwcmf88xkvoVC6YTYLzON753MB6swLX3kH-2BULT02eww73lGTE3KCq404Rz6sepdYLOQlK3YsY5a24eAJ6mObQytojHQGaoc24kU50BhmskEdBBV3MBoWTC4m-2B3mQ468tNhq-2FuVRVMeJC82FkmaJzydeZRR7KOVkfKR1FO5CoxsJdm6o-3D>
X-SG-EID:
EoFhXqZWDWKMkKl6jF3E4Mq4DzF9jp3TSi2qk6Ndk3sujlfQmZKPV7xU05PU5pIF4erbLnbCQWeUMl
MU1VI9kHxT2P+dgK60rR7iRFU48VnrGbOx4jV1ykD5yfmEp5+wNF3LBoK+FpOTHbjY+d6YEt1C1HLQ
2vLpnDvGHqefnNDqQYq3rDr5z8oYpVkvtcSEUq4n0CkHD/beVcpYswktH7RIgX5PTF58yAfk8p6fOW
Q=
X-SG-ID:
mcTyqcYTtmn56LU3ATD1f+iUTujmwRoxZg64JQ3pudUrwW7b9Bdn8YW+WfsI18Q+elOXMSa2cXdeK/
ohgwkIKgF0usY/5eouVrnJh6vkz6mqanpNTiMyU59QnLEdYtqPGvv4uimAYyv5krN9PxZSapaTD5uF
dX/u55KOmTaSyY0VRh9iiQ3BX3IRTjGTR/ZZDo/aUoQiX48R5zhUTysJR+iM39oOhsUP8ZJGfdw0ig
rBTIxLIcP9KIWoR/jOsHlla9TiAYEeW1vZ1iO7OXf1VJL0rZsR/vfaOlDJxjs3EBzcsFUkffTqopnf
Xf+dh2NwmzNc0Iw7ABTgu86Vvp4++d0JeyayvoUP+96nfILtT185cykUtm7BbOPN1mdhZsXuHQci9Z
1tS4/yjlf4LouZdzCw5GSzOKvc0Ml1yt7lrqV+ojBdtVrkaBsm6XFtCTKGPQ5FQrUYp/D3ZtBjfl5y
zQ==
X-MagicMail-OS: Linux 3.11 and newer
X-MagicMail-UUID: 122e7fd2-9a19-11ea-9d07-b37be4431ee5
X-MagicMail-SourceIP: 149.72.255.206
X-MagicMail-RegexMatch: 0
X-MagicMail-EnvelopeFrom:
<[email protected]>
X-MagicMail-Original-Destination: [email protected]
X-Archive: Yes
X-MagicMail-Quarantine: Yes
X-Archive: Yes
On 2020-05-20 8:00 a.m., Len Shneyder via mailop wrote:
Hi Chris,
Thanks for letting me know! That's reassuring that the work we started
last week is having a positive impact. If you're seeing continued abuse
and can share telemetry to help us narrow down our efforts I'd greatly
appreciate it. Just so everyone is aware this is an all hands on deck
effort with long term work planned as a result. Michael, thanks for
pinging me on both LinkedIN and here, if there's something you can share
feel free to send it my way.
Thank you,
-L
Message: 3
Date: Tue, 19 May 2020 15:48:58 -0400
From: Chris <[email protected]
<mailto:clewis%[email protected]>>
To: [email protected] <mailto:[email protected]>
Subject: Re: [mailop] SendGrid Abuse unresponsive
Message-ID: <[email protected]
<mailto:[email protected]>>
Content-Type: text/plain; charset=utf-8; format=flowed
I'm seeing a very significant drop off of sendgrid-originated spam.
Couple of minor phish/419 in the past 24 hours.
Anybody else?
------------------------------
Message: 4
Date: Tue, 19 May 2020 13:03:48 -0700
From: Michael Peddemors <[email protected]
<mailto:[email protected]>>
To: [email protected] <mailto:[email protected]>
Subject: Re: [mailop] SendGrid Abuse unresponsive
Message-ID: <[email protected]
<mailto:[email protected]>>
Content-Type: text/plain; charset=utf-8; format=flowed
Still seeing the phishing attempts.. Only reason there is less, is some
of the older IP(s) still in blacklists ;)
Just kidding, but volume high enough to show that they don't have the
issue handled as of yet..
On 2020-05-19 12:48 p.m., Chris via mailop wrote:
> I'm seeing a very significant drop off of sendgrid-originated spam.
> Couple of minor phish/419 in the past 24 hours.
>
> Anybody else?
>
> _______________________________________________
> mailop mailing list
> [email protected] <mailto:[email protected]>
>
https://urldefense.com/v3/__https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop__;!!NCc8flgU!OBe16g681JOdmVwa2463mJ_0LQN3TmT1oqeoaOl9EGnq6OySr7pmu9ystKI$
_______________________________________________
mailop mailing list
[email protected]
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada
This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.
_______________________________________________
mailop mailing list
[email protected]
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
