All this makes sense. Thanks for the time everyone. On Fri, Dec 2, 2016 at 12:14 PM, Laura Atkins <la...@wordtothewise.com> wrote:
> > On Dec 2, 2016, at 11:02 AM, Jay Hennigan <mailop-l...@keycodes.com> > wrote: > > On 12/2/16 10:23 AM, Luke Martinez via mailop wrote: > > Hey Team, > > I've got a sender who is sending surveys on behalf of PayPal. They are > sending from paypal-survey.com <http://paypal-survey.com>. Their mail is > fully authenticated and they have a DMARC policy set to reject. > > Most of their mail is still getting flagged as a likely phishing attempt > by gmail for obvious reasons. > > Even an innocuous test message sent using their configuration got flagged. > > Inline image 1 > > > I was wondering if there is any good way to deal with this situation. It > seems like sending messages littered with the word "PayPal" is just > going to be a disaster if you aren't sending from paypal.com > <http://paypal.com>. Any suggestions that might help this mail succeed? > > > It's likely not that the message is littered with the word "PayPal". There > are a lot of online vendors that send a lot of mail with that word in the > body of the message. This thread has it in both the body and the subject, > for example. > > It's almost certainly the sending domain. "vendor-survey.com" or " > payment-survey.com" or their own domain might be a better choice. > > > There are some internet providers that maintain data about domains or > companies that are frequent phish targets. They’re doing it mostly to > protect against cousin domains. > > What you have is a cousin domain and there’s nothing to distinguish it > from a well done phish. Sure, it’s legit. But how are the recipients going > to know that? > > Either you need to drop paypal completely from the message, or you need to > get paypal to step up and authenticate the message. Those are really your > choices here. > > Nothing else will be sufficient, IMO. > > laura > > > -- > Having an Email Crisis? 800 823-9674 <(800)%20823-9674> > > Laura Atkins > Word to the Wise > la...@wordtothewise.com > (650) 437-0741 > > Email Delivery Blog: http://wordtothewise.com/blog > > > > > > > _______________________________________________ > mailop mailing list > mailop@mailop.org > https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop > > -- Luke Martinez Team Lead | Email Delivery 520.400.5693
_______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
