date:20231116

Re: [mailop] How to report abuse to cloudflare? Only via Web-Form?!? Phishing sites not against cloudflare policy!?!

2023-11-16 Thread Lukas Tribus via mailop

On Thu, 16 Nov 2023 at 08:49, Benoit Panizzon via mailop
 wrote:
>
> Hi out there
>
> A website, most probably hacked WordPress, behind cloudflare, is hosting
> a phishing site targetting our webmail user.
>
> I reported this to the owner of the hacked website. I know he read my
> messages and choose to ignore the issue.
>
> So next step, report to cloudflare.

only slightly off topic:

I suggest to report phishing sites to Google [1] and Microsoft [2].

It will block the site in major browsers including Chrome, Firefox and
Edge and only takes a few seconds of your time.

Then the site owner can deal with it (or not).

Reporting the issue to site owners or Cloudflare is a bad investment
of your time, unfortunately.

cheers

[1] https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en
[2] https://www.microsoft.com/en-us/wdsi/support/report-unsafe-site
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] How to report abuse to cloudflare? Only via Web-Form?!? Phishing sites not against cloudflare policy!?!

2023-11-16 Thread Jarland Donnell via mailop

Another perspective might be “Why care?”

It’s their site that’s compromised, it’s up to them to care about it. If a host 
is sending abusive traffic your way, block the host, devalue their IPs by 
reducing the networks they can communicate with. Surely their website’s abuse 
isn’t making it back to you through the CF network, what is the IP connecting 
to your server?

> On Nov 16, 2023, at 4:28 AM, Benoit Panizzon via mailop  
> wrote:
> 
> Hi Laura
> 
>> Cloudflare does not concern itself with abuse. It does not host any 
>> websites, it only proxies back to the web host. They are not responsible for 
>> the content and they are unable to disconnect customers.
> 
> I am aware they do not host the content.
> 
> But they hide the IP address of their 'customer' and if that customer
> does not have any contact details on their site, there is no way to
> contact them. Especially of this is a malicious customer.
> 
> And yes, of course they are able to discontinue forwarding traffic to
> their customer and thus prevent more phishing to happen.
> 
>> I can’t imagine anyone who has been paying attention to expect cloudflare to 
>> take action against any abusive content. It’s not in their nature, and never 
>> has been. They protect a whole lot worse than phishing sites and have doxxed 
>> people who complain about abuse.
> 
> At least, they just discontinued proxying traffic to the phishing site
> and changed the DNS entries to reveal the IP of the 'real' hoster. So I
> have send a new complaint to the hoster and hope he will either urge
> his customer, wo is aware of the issue but ignoring it, to fix the
> hacked site, or block them until they do so.
> 
> Mit freundlichen Grüssen
> 
> -Benoît Panizzon-
> --
> I m p r o W a r e   A G-Leiter Commerce Kunden
> __
> 
> Zurlindenstrasse 29 Tel  +41 61 826 93 00
> CH-4133 PrattelnFax  +41 61 826 93 01
> Schweiz Web  http://www.imp.ch
> __
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] How to report abuse to cloudflare? Only via Web-Form?!? Phishing sites not against cloudflare policy!?!

2023-11-16 Thread Jay Hennigan via mailop


On 11/16/23 02:54, Laura Atkins via mailop wrote:

The New York Times

Laura


Can you be more specific? Link to an article?

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Email Bounces

2023-11-16 Thread Matt Vernhout via mailop

Sounds like you're sending faster than your reputation allows based on the
indicated AUP-1310 flag:

1300 - 1340
Spectrum limits the number of concurrent connections from a sender, as well
as the total number of connections allowed. Limits vary based on the
reputation of the IP address. Reduce your number of connections and try
again later.

Try sending slower to spectrum domains.

~ Matt


On Thu, Nov 16, 2023 at 6:36 AM Polath, Kiran via mailop 
wrote:

> Hello Team,
>
> We at Broadridge Financial Solutions sends millions of email as financial
> customer communication on behalf of our clients .We see our emails are
> frequently getting blocked by charter.net
> 
>  & rr.com, this is impacting our reputation . Can you take it as high
> priority and remediate this as it is very important to our customers to
> have this resolved. please find the below reasons
>
> 550 5.1.0 ...@... sender rejected. Please see
> https://www.spectrum.net/support/internet/{hash}-{hash} for more
> information. AUP#In-1310
>
> rest
>
> 2023-11-15 02:52:11 EST
>
> charter.net
>
> 550 5.1.0 ...@... sender rejected. Please see
> https://www.spectrum.net/support/internet/{hash}-{hash} for more
> information. AUP#In-1310
>
> rest
>
> 2023-11-15 02:52:11 EST
>
> wi.rr.com
>
> 550 5.1.0 ...@... sender rejected. Please see
> https://www.spectrum.net/support/internet/{hash}-{hash} for more
> information. AUP#In-1310
>
> rest
>
> 2023-11-15 02:52:11 EST
>
> charter.net
>
> 550 5.1.0 ...@... sender rejected. Please see
> https://www.spectrum.net/support/internet/{hash}-{hash} for more
> information. AUP#In-1310
>
> rest
>
> 2023-11-15 02:52:10 EST
>
> wi.rr.com
>
> 550 5.1.0 ...@... sender rejected. Please see
> https://www.spectrum.net/support/internet/{hash}-{hash} for more
> information. AUP#In-1310
>
> rest
>
> 2023-11-15 02:52:10 EST
>
> wi.rr.com
>
>
>
>
>
> Regards,
>
> *Kiran Kumar Polath* | ICS-Email Operations | Broadridge Financial
> Solutions (India) Private Limited
> Adjacent to Cyber Towers, Hi-Tech City, Madhapur | Hyderabad 500081
> Telangana | India | m +91 8008297767| m +91 9154044691
>
> 
> 
> 
> 
>
> broadridge.com 
>
>
>
>
>
>
> This message and any attachments are intended only for the use of the
> addressee and may contain information that is privileged and confidential.
> If the reader of the message is not the intended recipient or an authorized
> representative of the intended recipient, you are hereby notified that any
> dissemination of this communication is strictly prohibited. If you have
> received this communication in error, please notify us immediately by
> e-mail and delete the message and any attachments from your system.
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
>
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] If one signature is good, 72 signatures must be better

2023-11-16 Thread Bill Cole via mailop


On 2023-11-16 at 06:49:03 UTC-0500 (16 Nov 2023 06:49:03 -0500)
John Levine via mailop 
is rumored to have said:

It appears that Gellner, Oliver via mailop  
said:

On 16.11.2023 at 03:05 John Levine via mailop wrote:

I just got a couple of quite remarkable messages from Sabre's 
Tripcase service, confirming that they'd received some info I mailed 
thmm.
Below you can see the Authentication Results header my mail server 
added.
All 72 valid DKIM signatures really are there, and I am trying to 
imagine what kind of screwup at Proofpoint added them. If anyone 
would like
the whole message, just ask. There's nothing interesting in it other 
than the signatures.


Probably they don't know how to apply a specific signature based on 
the From address. So instead they apply all DKIM signatures they have 
to all

emails.


I've gotten a lot of mail from Tripcase and this is the first one with 
72 signatures.  It's obviously

a bug, but it's a rather strange bug.


My bet is that it's a line-break error. Some text file somewhere is 
missing LFs



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Email Bounces

2023-11-16 Thread Tom Bartel via mailop

Kiran,

Have you investigated the noted DSN 550 5.1.0. and checked your recipient
address accordingly?

https://senderscore.org/assess/bounce-lookup/email-error/5-1-0/

Tom

On Thu, Nov 16, 2023 at 5:08 AM Marco via mailop  wrote:

> Am 16.11.2023 schrieb "Polath, Kiran via mailop" :
>
> > 550 5.1.0 ...@... sender rejected. Please see
> > https://www.spectrum.net/support/internet/{hash}-{hash}
>
> Does that page show something about the issue?
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
>
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] [ADMIN] Re: Bounces

2023-11-16 Thread Graeme Fowler via mailop

On 16 Nov 2023, at 15:37, Carsten Schiefner via mailop  
wrote:
> One could possibly argue in addition that sending the same email three times 
> - where the tiny differences only come clear after close inspection - might 
> not help lifting some initial hesitancy.
> 
> Even more so when in combination with the above, they are sent to a random 
> set of list related addresses such as -request, -bounce and -owner. And when 
> in one instance the list address is specified twice.
> 
> That leaves impressions with regard to the general tone of the always 
> identical email text.

Agreed in every sense; however do note that I emailed the OP privately with a 
"please don't do this again or you'll be unsubscribed" message.

Regards

Graeme [wearing admin hat]
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Bounces

2023-11-16 Thread Carsten Schiefner via mailop

One could possibly argue in addition that sending the same email three times - 
where the tiny differences only come clear after close inspection - might not 
help lifting some initial hesitancy.

Even more so when in combination with the above, they are sent to a random set 
of list related addresses such as -request, -bounce and -owner. And when in one 
instance the list address is specified twice.

That leaves impressions with regard to the general tone of the always identical 
email text.

Best,

-C.

> Am 16.11.2023 um 15:43 schrieb Michael via mailop :
> 
> Always terrible when big ESP's simply say 'Remove Us' and think it will 
> happen because they are big, instead of 'asking' why you are being flagged, 
> and what can you do to improve your reputation..
> 
> Especially as a 'Financial Services' related business, the onus is on you to 
> ensure that you are at the top of your game, and have clear transparency..
> 
> And on this list, you better be willing to share exactly what email/domain/ip 
> is having the problem, if you want the community to help you out..
> 
>> On 11/16/23 03:46, Polath, Kiran via mailop wrote:
>> Hello Team,
>> We at Broadridge Financial Solutions sends millions of email as financial 
>> customer communication on behalf of our clients .We see our emails are 
>> frequently getting blocked by charter.net 
>> 
>>  & rr.com, this is impacting our reputation . Can you take it as high 
>> priority and remediate this as it is very important to our customers to have 
>> this resolved. please find the below reasons
>> 550 5.1.0 ...@ ... sender rejected. Please see 
>> https://www.spectrum.net/support/internet/{hash}-{hash} 
>> for more 
>> information. AUP#In-1310
>>
>> 2023-11-15 02:52:11 EST
>>
>> charter.net
>> 550 5.1.0 ...@ ... sender rejected. Please see 
>> https://www.spectrum.net/support/internet/{hash}-{hash} 
>> for more 
>> information. AUP#In-1310
>>
>> 2023-11-15 02:52:11 EST
>>
>> wi.rr.com
>> 550 5.1.0 ...@ ... sender rejected. Please see 
>> https://www.spectrum.net/support/internet/{hash}-{hash} 
>> for more 
>> information. AUP#In-1310
>>
>> 2023-11-15 02:52:11 EST
>>
>> charter.net
>> 550 5.1.0 ...@ ... sender rejected. Please see 
>> https://www.spectrum.net/support/internet/{hash}-{hash} 
>> for more 
>> information. AUP#In-1310
>>
>> 2023-11-15 02:52:10 EST
>>
>> wi.rr.com
>> 550 5.1.0 ...@ ... sender rejected. Please see 
>> https://www.spectrum.net/support/internet/{hash}-{hash} 
>> for more 
>> information. AUP#In-1310
>>
>> 2023-11-15 02:52:10 EST
>>
>> wi.rr.com
>> Regards,
>> *Kiran Kumar Polath*| ICS-Email Operations | Broadridge Financial Solutions 
>> (India) Private Limited
>> Adjacent to Cyber Towers, Hi-Tech City, Madhapur | Hyderabad 500081 
>> Telangana | India | m +91 8008297767| m +91 9154044691
>> 
>> broadridge.com __
>> This message and any attachments are intended only for the use of the 
>> addressee and may contain information that is privileged and confidential. 
>> If the reader of the message is not the intended recipient or an authorized 
>> representative of the intended recipient, you are hereby notified that any 
>> dissemination of this communication is strictly prohibited. If you have 
>> received this communication in error, please notify us immediately by e-mail 
>> and delete the message and any attachments from your system.
>> ___
>> mailop mailing list
>> mailop@mailop.org
>> https://list.mailop.org/listinfo/mailop
> 
> -- 
> "Catch the Magic of Linux..."
> 
> Michael Peddemors, President/CEO LinuxMagic Inc.
> Visit us at http://www.linuxmagic.com @linuxmagic
> 
> A Wizard IT Company - For More Info http://www.wizard.ca
> "LinuxMagic" is a Registered TradeMark of Wizard Tower TechnoServices Ltd.
> 
> 604-682-0300 Beautiful British Columbia, Canada
> ___
> mailop mailing list
> mailop@mailop.org
>

Re: [mailop] Bounces

2023-11-16 Thread Michael via mailop

Always terrible when big ESP's simply say 'Remove Us' and think it will
happen because they are big, instead of 'asking' why you are being
flagged, and what can you do to improve your reputation..

Especially as a 'Financial Services' related business, the onus is on
you to ensure that you are at the top of your game, and have clear
transparency..

And on this list, you better be willing to share exactly what
email/domain/ip is having the problem, if you want the community to help
you out..

On 11/16/23 03:46, Polath, Kiran via mailop wrote:

Hello Team,

We at Broadridge Financial Solutions sends millions of email as
financial customer communication on behalf of our clients .We see our
emails are frequently getting blocked by charter.net
& rr.com, this is impacting our reputation . Can you take it as high priority and remediate this as it is very important to our customers to have this resolved. please find the below reasons

550 5.1.0 ...@ ... sender rejected. Please see
https://www.spectrum.net/support/internet/{hash}-{hash}
for
more information. AUP#In-1310

2023-11-15 02:52:11 EST

charter.net

550 5.1.0 ...@ ... sender rejected. Please see
https://www.spectrum.net/support/internet/{hash}-{hash}
for
more information. AUP#In-1310

2023-11-15 02:52:11 EST

wi.rr.com

550 5.1.0 ...@ ... sender rejected. Please see
https://www.spectrum.net/support/internet/{hash}-{hash}
for
more information. AUP#In-1310

2023-11-15 02:52:11 EST

charter.net

550 5.1.0 ...@ ... sender rejected. Please see
https://www.spectrum.net/support/internet/{hash}-{hash}
for
more information. AUP#In-1310

2023-11-15 02:52:10 EST

wi.rr.com

550 5.1.0 ...@ ... sender rejected. Please see
https://www.spectrum.net/support/internet/{hash}-{hash}
for
more information. AUP#In-1310

2023-11-15 02:52:10 EST

wi.rr.com

Regards,

broadridge.com __

This message and any attachments are intended only for the use of the
addressee and may contain information that is privileged and
confidential. If the reader of the message is not the intended recipient
or an authorized representative of the intended recipient, you are
hereby notified that any dissemination of this communication is strictly
prohibited. If you have received this communication in error, please
notify us immediately by e-mail and delete the message and any
attachments from your system.

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

--
"Catch the Magic of Linux..."

Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic

A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" is a Registered TradeMark of Wizard Tower TechnoServices Ltd.

604-682-0300 Beautiful British Columbia, Canada
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] Email bounces

2023-11-16 Thread Polath, Kiran via mailop

Hello Team,

We at Broadridge Financial Solutions sends millions of email as financial 
customer communication on behalf of our clients .We see our emails are 
frequently getting blocked by 
charter.net
  & rr.com, this is impacting our reputation . Can you take it as high priority 
and remediate this as it is very important to our customers to have this 
resolved. please find the below reasons


550 5.1.0 ...@... sender rejected. Please see 
https://www.spectrum.net/support/internet/{hash}-{hash}
 for more information. AUP#In-1310
2023-11-15 06:00:36 EST
carolina.rr.com
550 5.1.0 ...@... sender rejected. Please see 
https://www.spectrum.net/support/internet/{hash}-{hash}
 for more information. AUP#In-1310
2023-11-15 04:33:45 EST
charter.net
550 5.1.0 ...@... sender rejected. Please see 
https://www.spectrum.net/support/internet/{hash}-{hash}
 for more information. AUP#In-1310
2023-11-15 04:33:45 EST
charter.net
550 5.1.0 ...@... sender rejected. Please see 
https://www.spectrum.net/support/internet/{hash}-{hash}
 for more information. AUP#In-1310
2023-11-15 04:33:15 EST
charter.net
550 5.1.0 ...@... sender rejected. Please see 
https://www.spectrum.net/support/internet/{hash}-{hash}
 for more information. AUP#In-1310
2023-11-15 04:33:15 EST
charter.net
550 5.1.0 ...@... sender rejected. Please see 
https://www.spectrum.net/support/internet/{hash}-{hash}
 for more information. AUP#In-1310
2023-11-15 04:32:13 EST
charter.net
550 5.1.0 ...@... sender rejected. Please see 
https://www.spectrum.net/support/internet/{hash}-{hash}
 for more information. AUP#In-1310
2023-11-15 04:30:43 EST
cfl.rr.com


Regards,
Kiran Kumar Polath | ICS-Email Operations | Broadridge Financial Solutions 
(India) Private Limited
Adjacent to Cyber Towers, Hi-Tech City, Madhapur | Hyderabad 500081 Telangana | 
India | m +91 8008297767| m +91 9154044691
[cid:image001.png@01DA17F7.D6C0EE20]
 [cid:image002.png@01DA17F7.D6C0EE20]   
[cid:image003.png@01DA17F7.D6C0EE20] 
  
[cid:image004.png@01DA17F7.D6C0EE20] 

broadridge.com

This message and any attachments are intended only for the use of the addressee 
and may contain information that is privileged and confidential. If the reader 
of the message is not the intended recipient or an authorized representative of 
the intended recipient, you are hereby notified that any dissemination of this 
communication is strictly prohibited. If you have received this communication 
in error, please notify us immediately by e-mail and delete the message and any 
attachments from your system.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Email Bounces

2023-11-16 Thread Marco via mailop

Am 16.11.2023 schrieb "Polath, Kiran via mailop" :

> 550 5.1.0 ...@... sender rejected. Please see
> https://www.spectrum.net/support/internet/{hash}-{hash}

Does that page show something about the issue?
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Email Bounces

2023-11-16 Thread Laura Atkins via mailop

Did you follow the links and do what they told you to do? How long have you waited for a response?LauraSent from my iPhoneOn Nov 16, 2023, at 11:35 AM, Polath, Kiran via mailop wrote:

Hello Team,

We at Broadridge Financial Solutions sends millions of email as financial customer communication on behalf of our clients .We see
our emails are frequently getting blocked by charter.net
& rr.com, this is impacting our reputation . Can you take it as high priority and remediate this as it is very important to our customers to have this resolved. please find the below reasons