That account was terminated on the 14th. For what it is worth (and I know
this is worth very little here), our system did prevent more than ~90% of
their *attempted* mail from ever leaving our pipes. So I like to tell
myself we prevented 9 million phish instead of telling myself we sent 1
million phish. Kidding of course...

Thomas, if you're still seeing mail arrive *today* with those unsubscribe
links, that would be incredibly strange. Would love to chat offline if
that's actually what you're seeing. An account sending email 3 days after
being terminated isn't really a thing that happens.

Luke

On Wed, Aug 17, 2022 at 10:09 AM Thomas Ho via mailop <mailop@mailop.org>
wrote:

> Funny how we're still seeing this exact same template spewing out of
> Sendgrid for days.
>
> I guess (hope) they're busy working on tackling much more malicious spam
> coming from their network.
>
> -Thomas
>
> On 8/13/22 15:46, John Levine via mailop wrote:
> > This showed up today, send to the email of my father who died in 2019.
> >
> > Full copy available on request to anyone who has a plausible use for it.
> > ---------- Forwarded message ----------
> > Date: Sat, 13 Aug 2022 15:41:20
> > From: support <alert@mybillingteam.store>
> > Reply-To: g...@hansa-fx.com
> > To: x@x.x
> > Subject: IP address blacklisted(Child Pornography Act 1996 violated)
> >
> > Hello,
> >
> > We have found instances of child pornography accessed from your IP
> > address. This is a punishable offence under The Child Pornography
> > Prevention Act of 1996 . For now we are blacklisting your IP address
> > and if there is any further action from Microsoft you will be informed
> > via email.
> >
> > If this was not you and you suspect potential hack or id theft contact
> > Microsoft Support Team at +1-808-460-7701
> >
> > Microsoft Support
> > +1-808-460-7701
> >
> > support
> >
> > 16 Central, HCW , Tampa , FL
> >
> > Unsubscribe (
> >
> https://u28413401.ct.sendgrid.net/asm/unsubscribe/?user_id=2401&data=jGkM5n0umWt5giSnrpl6O4tFPc5wzKFsV94hjZBX8pQIheAKOas_zWNsEOncd-HbCkpbIvoVXgT8sU6DigWO_eN-7q_f3_YdzG22esQZaeYvwfRfC4RvAZR91smd6V5UOKs3K3YnTNLu7eqpmNs5MgibY69YuER5xZyCM1zKjcZ-8WdqDiZ09ZDW8MnPZwlCq4ExdET6b1FfymKFmn0M57AS6OrQ9Z41ntAYLbucVhznk0bqlHrqgYAhJmD8r32C-y6jAiILcbSJnjKcwbO4A2XlH2Xq_STVI0NZNEGJSk3rsNiS1BljdqcVvog_l47a_9QqpTTzdEtJxb76h7njtiNvZmy2GahPuC5VtdWCFL8sw8dhTZN792pmswmZV8Stx9YNphaZCY0Zz-Y-6B3oy7d_C-u0550ED8DjIh5dQKo05hHfkqQv-JzGA1cm2BIQcEaDOWBAXIFPQhsZtmN1NV352KGimJzF1zQBc869JXc0LNV6lWdxB9tHv9FPAxyyUvAI7GCYEprshgEYBXxNc5vwH5SsHnk5XXKpbVztKb-rF_CXEu4_sVDZt1dcMerLreg5jj1abowz0vzCxu91ljSE_625gU2Nfvwf_evzfEtaDdgklH90ndYyZNjTEUFL7B1TCJ3FIyVfY2tfVarBYX_aZRyujWy2HMNwhbJApYoFQ5KIVbl8odCtVRe5Ss6z720nEmO6S3yE8IgJXIPTCuYH_plCZ2es85QKi21w-gGWICt3gPZNDYpxq2V23Amf9DtI98NiQg93_f9tWLu3ncR_l7Xu-QyQ-NHpZGOZzJGJl6hZO0NKhBs2fS-DSZwbI8sy0pFprpTmbArND7x-CkuBHe5H1WW0FyHCHb1NLsK9SBn-aJMsk0xtAowOpzMGPsWj_AFn12Gj1MU2qh_
> >
> Zc4tlcFvAEIaXfZnGVU0Y8MqPIL7zCaF4I01Q1GxU7wziTkPwcMyeUT8qvfjbtJnQ9_zTMykNipOu1NmmemXBHGJml3neoZ75wscSo_2XSg1AKGk0ceEGUu-Xrj5FsTwd4i_Lvu6i2aPAKpRgkCrLZN7x_Cy7fsLksN8juSIi3m-GYcaCMsxtAjo9xI9ZewQel_kjR-Nl43qwegdl1Al5eZmDY0VY749OELIRduc-SUty-0Pmt4NZPKD7hqCkVV6X_qgRC2aKxJAlFKIU03FW1R6Iueoz4qstvxH32NPeLz2H_OoTdTI=
>
> > ) - Unsubscribe Preferences (
> >
> https://u28413401.ct.sendgrid.net/asm/?user_id=28413401&data=iw27W5ySrSfDVCRlPaXMu5zZMK6M9L26Fq8UYqOfdZhoMDAwdTAwMFT1ohToGkgPLNAwsvCWjLkjDNagBfBVNm4La20qWnyb349Ffm1yfrD4ctSwuskuNp7Uzh4IUp41Fz5FYgodIco5ievuqL7nDm63AdCvifURyfq07C4ck6IkGGV9omBlZ8ahQz-3tfQdDuXkkIDKsln-j8pQTiYAA5cnxyzRrdDZKAPFE-nAcd6eB4cSSmMY09NNRAhGs5YRCqXXGKB4rg8QCfDbyNXKbsVbIl5lf9NZ3QOD2WjZhkFDFX0rv2rLzw3FsHRqaNyT-YRCrW_0zWBcn4nYM2r8jngI78F3qjI8LsQOcjXBVa27_OUX4cPEoqAibJW0zJHhKOD20KWDGgE2k6TUiFpMPQ1eHg6A28fWkJsffmFbKXirplWlcEo7iw3oiiUcVpREbcdELBXZ8MiiKIPil6T7if1FH2oBhwKnbyzjiUxo3uIlxos0Yr-xV-3ZA_h5o4JifaCzIFwNYxzT3hqapJw6njG_wUCUfT9z8McN5CzkKNjQc4WxwiMuld1JJbyzB5tjNjAHAht1wirqjrrFBHoG
> >
> 9m2B9eqqIeckhXlTMCaQ3jJBMnLpcnAQ0_wLVL-Ua2U5SX1cXm1n6JorUlG27yxJvUItjuWXE99NnN9qImyxlaWg0Sk-OFOA76cLP5hVv10Vb_BMw5cwVcHLI5cKs5PEHUAX8ua4pV3fLgWR6TERaT8XpKcZhkiBtDD9kmleAOCgfSnjpvlyvFkJAPsoiibP-WhJNDmKE8FP25gZ2qp8nLaffDtB-mnu2rs2dD0XFijEcX-QvOPrqh35JhkYl2_NgXb8yiH8L45RRqqDKQprOF9cdvyeV5Q4P7DBvm8rynoSBWaMTGK5EVWIKI66IJPU5MFNCzoKp1WMbnIH-7EVIVwu6EIh4Zf1RHHWqj9kMABWHUx_FUAxtKJCV-t8IrT2T46yiZ4W5StTXvvKFti9h3fjm5FZnoOlKzmv-2LsBGN_nBQ8t4BLgFUVe-MeSYIwUzWUqs1W-vLqDIu5K-ZLZTuKv2Scr_Zsmf69w3sItxrz7AdHoj4xqjGa6cvtack98IyRV6WY5bSVoQyDC3vgSCQWZ7rNyWwr7QnXVgtMpEA0fEGomlkAVRfJYBv-zQ2UfQDlov0zc8hIprZ3mVS-QdzW7TXh6web9yjkoscnc46UaB_4Z-W7-cZy6lACb10DLrShERY6f4buraANSARHo9TXZAfgHFk7Mg==
>
> > )
> > _______________________________________________
> > mailop mailing list
> > mailop@mailop.org
> > https://list.mailop.org/listinfo/mailop
>
> --
> "What is a threat? Something that can harm you.
> What is it that I seek? The ones that fear peace.."
>
> --------------------------------------------
> Thomas Ho, Senior Threat Researcher - LinuxMagic Inc.
> For More Info www.linuxmagic.com
> "LinuxMagic" is a Registered TradeMark of Wizard Tower TechnoServices Ltd.
> For More Info www.wizard.ca
> 604-682-0300 Beautiful British Columbia, Canada
>
> --------------------------------------------
> This email and any electronic data contained are confidential and
> intended solely for the use of the individual or entity to which
> they are addressed. Please note that any views or opinions presented
> in this email are solely those of the author and are not intended
> to represent those of the company.
>
> --------------------------------------------
>
> _______________________________________________
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
>
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to