Re: [mailop] Any Apple email team on the list? Interesting tidbit like to shed light on...

2023-05-02 Thread Atro Tossavainen via mailop
On Tue, May 02, 2023 at 10:11:46PM -0400, John Levine via mailop wrote: > It appears that Michael Peddemors via mailop said: > >Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.120.41.1.2\)) > > I sent a message to myself from > > Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.500.231\)) > >

Re: [mailop] Any Apple email team on the list? Interesting tidbit like to shed light on...

2023-05-02 Thread John Levine via mailop
It appears that Michael Peddemors via mailop said: >Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.120.41.1.2\)) I sent a message to myself from Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.500.231\)) There's no X-Universal anything. Wherever it came from, it's not the Mac mail progaram. R's,

[mailop] Any Apple email team on the list? Interesting tidbit like to shed light on...

2023-05-02 Thread Michael Peddemors via mailop
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.120.41.1.2\)) X-Universally-Unique-Identifier: DDB4B009-F0E0-4255-8DC7- Trying to understand if this is an unintended disclosure.. Of course, UUID's etc are important tools for verification, and can be useful in validating authenticity,

Re: [mailop] Requests with mixed caesar cipher encoding from microsoft ips

2023-05-02 Thread Tom I via mailop
On 02/05/2023 18:18, Michael Peddemors via mailop wrote: Do you have a sampling of the IPs, and we can see if it correlates with some of our datasets? We saw similar requests earlier this year, around February and March. One of our applications generates URLs in the form "...?key=chars>=" -

Re: [mailop] Requests with mixed caesar cipher encoding from microsoft ips

2023-05-02 Thread Michael Peddemors via mailop
Do you have a sampling of the IPs, and we can see if it correlates with some of our datasets? Sure would be nice if the big guys, did a better job of SWIP on their ranges, so we know which ones they operate, vs the ones they rent. On 2023-05-02 07:34, Abuse Department - Advision via mailop

Re: [mailop] Requests with mixed caesar cipher encoding from microsoft ips

2023-05-02 Thread Daniel K. via mailop
On 5/2/23 14:34, Abuse Department - Advision via mailop wrote: > I'm starting to think that this is not a malicious activity but some > kind of anonymization/url checking action from some Microsoft or anti > Malware system. > > Those are some example of the encoded parameters > > [...] > >

[mailop] Requests with mixed caesar cipher encoding from microsoft ips

2023-05-02 Thread Abuse Department - Advision via mailop
Hi all, since 28/04 we are observing a huge amount of requests coming from Microsoft ips to our link tracking system. In the emails we send we override al links to point to our link tracking system, but we are seeing that many tracking requests are coming with the query string parameters

Re: [mailop] Proofpoint contact needed - Duplicate ticket for IP block removal issue

2023-05-02 Thread Paul Gregg via mailop
On Tue, May 02, 2023 at 08:04:35AM +, Andy Onofrei via mailop wrote: > Can anyone has a way to reach out to Proofpoint, my contacts are unresponsive > for the last weeks, after MAWWG. > I have a ticket with status unresolved for several weeks, they seem to be > stuck on their queue.

[mailop] Proofpoint contact needed - Duplicate ticket for IP block removal issue

2023-05-02 Thread Andy Onofrei via mailop
Hi everyone, Can anyone has a way to reach out to Proofpoint, my contacts are unresponsive for the last weeks, after MAWWG. I have a ticket with status unresolved for several weeks, they seem to be stuck on their queue. Thank you Andy ___ mailop