Re: [mailop] Contact for Zoom webinar spam sent via Sendgrid (ugh)

[Atro Tossavainen via mailop]

Over yesterday and today, the following X-Entity-IDs have sent us
mail that somehow related to .zoom.us:

  X-Entity-ID: ApJYVCoyRSXXkzbu3h3uow==
  X-Entity-ID: lURbVkUlQbFl9F6ROPqNUw==
  X-Entity-ID: mDhfxq9OikvIkQieTwdfQA==
  X-Entity-ID: 7mxhBNMkQ9yfwz0A5+NG7Q==

These correspond to the SendGrid user IDs

  Return-Path:  Here's the two that they all share:
> 
> Return-path: 
> Return-path: 
> 
> (original unmunged version sent directly to you, Luke)
> 
> I've got zoom messages via sendgrid being rejected via a system
> filter currently, so there should be a bit of bounce messages going
> back at Zoom/Sendgrid, but yet they still keep coming...
> 
> Shouldn't there be some sort of required unsubscribe or report link
> at the bottom of these?  I seem to remember legitimate zoom
> invitations and such all have one?  But it's been a while.
> 
> On 7/6/21 2:33 PM, Luke wrote:
> >If you could share the return-path of the offending message, I can
> >have it looked at.
> >
> >Cheers,
> >Luke
> >
> >On Tue, Jul 6, 2021 at 11:39 AM Brielle via mailop
> >mailto:mailop@mailop.org>> wrote:
> >
> >Hello,
> >
> >Anyone here have a contact for Zoom in re of webinar spam being sent
> >from their platform via Sendgrid owned IPs?
> >
> >I'm rather unhappy with the fact they're allowing people to spam
> >with no
> >unsubscribe or report feature.
> >
> >I know Sendgrid is a hot steaming pile of dog excrement these days when
> >it comes to spam, so the lack of reporting or unsubscribe link doesn't
> >surprise me...
> >
> >
> >
> >-- Brielle Bruns
> >The Summit Open Source Development Group
> >http://www.sosdg.org     / http://www.ahbl.org
> >
> >___
> >mailop mailing list
> >mailop@mailop.org 
> >https://list.mailop.org/listinfo/mailop
> >
> >
> 
> 
> -- 
> Brielle Bruns
> The Summit Open Source Development Group
> http://www.sosdg.org/ http://www.ahbl.org
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop

-- 
Atro Tossavainen, Founder, Partner
Koli-Lõks OÜ (reg. no. 12815457, VAT ID EE101811635)
Tallinn, Estonia
tel. +372-5883-4269, http://www.koliloks.eu/
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Contact for Zoom webinar spam sent via Sendgrid (ugh)

[Brielle via mailop]

Here's the two that they all share:

Return-path: 
Return-path: 

(original unmunged version sent directly to you, Luke)

I've got zoom messages via sendgrid being rejected via a system filter 
currently, so there should be a bit of bounce messages going back at 
Zoom/Sendgrid, but yet they still keep coming...


Shouldn't there be some sort of required unsubscribe or report link at 
the bottom of these?  I seem to remember legitimate zoom invitations and 
such all have one?  But it's been a while.


On 7/6/21 2:33 PM, Luke wrote:
If you could share the return-path of the offending message, I can have 
it looked at.


Cheers,
Luke

On Tue, Jul 6, 2021 at 11:39 AM Brielle via mailop > wrote:


Hello,

Anyone here have a contact for Zoom in re of webinar spam being sent
from their platform via Sendgrid owned IPs?

I'm rather unhappy with the fact they're allowing people to spam
with no
unsubscribe or report feature.

I know Sendgrid is a hot steaming pile of dog excrement these days when
it comes to spam, so the lack of reporting or unsubscribe link doesn't
surprise me...



-- 
Brielle Bruns

The Summit Open Source Development Group
http://www.sosdg.org     / http://www.ahbl.org

___
mailop mailing list
mailop@mailop.org 
https://list.mailop.org/listinfo/mailop





--
Brielle Bruns
The Summit Open Source Development Group
http://www.sosdg.org/ http://www.ahbl.org
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] Contact for Zoom webinar spam sent via Sendgrid (ugh)

[Brielle via mailop]

Hello,

Anyone here have a contact for Zoom in re of webinar spam being sent 
from their platform via Sendgrid owned IPs?


I'm rather unhappy with the fact they're allowing people to spam with no 
unsubscribe or report feature.


I know Sendgrid is a hot steaming pile of dog excrement these days when 
it comes to spam, so the lack of reporting or unsubscribe link doesn't 
surprise me...




--
Brielle Bruns
The Summit Open Source Development Group
http://www.sosdg.org/ http://www.ahbl.org
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Cyren status regularly flapping back to Suspicious

[Florian Effenberger via mailop]

Hello,

thanks for the replies!

John Levine via mailop wrote on 05.07.21 at 18:59:


I believe the recipient's mail system is misconfigured.  If Cyren tags an IP
as yellow, they should soft fail with 450 so it can retry later.


That could be indeed helpful. I was reaching out to their postmaster 
already (recipient is a larger German city) to see if they can do 
something - a greylisting would be "fine", but the hard reject is an issue.


Alessandro Vesely via mailop wrote on 06.07.21 at 18:38:


I tried https://www.cyren.com/security-center/cyren-ip-reputation-check-gate and it says "No 
Risk" for 188.34.176.133 and "Please enter a valid IP" for 2a01:4f8:c010:587c::1.  
Is it the latter the one that gives you problems?


The IPv4 is one of the several IPs affected, indeed. I unblocked it 
again last week, but it likely will switch back after a while. Not sure 
if CYREN supports IPv6 - but the recipient's MX doesn't in any case, so 
it's not a workaround to deliver the mails either.


Florian
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] ISO: tech contact with Trend Micro

[Liam Fisher via mailop]

ISO: tech contact with Trend Micro - or someone who knows how to get a 
submission looked at






___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Cyren status regularly flapping back to Suspicious

[Alessandro Vesely via mailop]

On Mon 05/Jul/2021 14:45:30 +0200 Florian Effenberger via mailop wrote:


Their website lists the IP as yellow ("Suspicious"), with an explanation of 
"The IP has only recently started sending mails, and therefore still has an 
Unknown reputation".



I tried https://www.cyren.com/security-center/cyren-ip-reputation-check-gate 
and it says "No Risk" for 188.34.176.133 and "Please enter a valid IP" for 
2a01:4f8:c010:587c::1.  Is it the latter the one that gives you problems?



Best
Ale
--








___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] [E] Technical Contact to Yahoo Complaint Feedback Loop Service

[Lili Crowley via mailop]

Hi Pierre-Yves -
Please contact me off-list.

Thanks!


Lili Crowley
Postmaster
Verizon Media


On Tue, Jul 6, 2021 at 10:57 AM Pierre-Yves Dubreucq via mailop <
mailop@mailop.org> wrote:

> Dear Mailops!
>
> We've made a mistake in the form of Complaint Feedback Loop (CFL)
> We didn't post the good mail reporting address, so we can't manage
> complaint
> We tried to update and/or delete CFL via Yahoo Complaint Feedback Loop
> form with no success.
>
> When we submit the form I can see this message :
> Thank you! We've received your email.
>
> Your request will be processed within 48 hours. If there are no issues
> with the data provided, you will start receiving CFL reports at the
> reporting address provided. If you do not receive the reports or need to
> make changes in the future, contact Customer Care
> 
> .
> When I click on the link to contact Customer Care, I have an Oops message
> :(
>
> The problem is that we continue to receive complaint on the bad address.
> Do you know how I could update or delete our CFL subscribe to a domain
> list whit another method ?
> Does anyone has any contact to a technical person, who could help us to
> delete/modify our CFL ?
>
> Thanks by advance.
> Regards,
> Pierre-Yves Dubreucq
> ___
> mailop mailing list
> mailop@mailop.org
>
> https://urldefense.proofpoint.com/v2/url?u=https-3A__list.mailop.org_listinfo_mailop&d=DwIGaQ&c=sWW_bEwW_mLyN3Kx2v57Q8e-CRbmiT9yOhqES_g_wVY&r=VCg-Q9ZdQlK27bNQMmErgRlkvpS8hDriASSkCoU3s2s&m=_NAtv33dd8It7vCM0Kv9pqUz8T_vMQHlQzqZK87CeX8&s=pbnTxDi_LKWaFPprQDdPyJ8IrpDdEa9P40VpwjnUtWo&e=
>
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] Technical Contact to Yahoo Complaint Feedback Loop Service

[Pierre-Yves Dubreucq via mailop]

Dear Mailops!

We've made a mistake in the form of Complaint Feedback Loop (CFL)
We didn't post the good mail reporting address, so we can't manage complaint
We tried to update and/or delete CFL via Yahoo Complaint Feedback Loop form
with no success.

When we submit the form I can see this message :
Thank you! We've received your email.

Your request will be processed within 48 hours. If there are no issues with
the data provided, you will start receiving CFL reports at the reporting
address provided. If you do not receive the reports or need to make changes
in the future, contact Customer Care

.
When I click on the link to contact Customer Care, I have an Oops message :(

The problem is that we continue to receive complaint on the bad address.
Do you know how I could update or delete our CFL subscribe to a domain list
whit another method ?
Does anyone has any contact to a technical person, who could help us to
delete/modify our CFL ?

Thanks by advance.
Regards,
Pierre-Yves Dubreucq
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Technical Contact to paddle.com mail platform operator?

[Stefano Bagnara via mailop]

On Mon, 5 Jul 2021 at 11:02, Benoît Panizzon via mailop
 wrote:
> We have a customer who orders software licenses via paddle.com
>
> He should get keys via Email. But they never arrive. I also don't see
> any trace of those emails in our logs.

Hi had an issue with missing email from them to me. No one was able to
fix it until I found the email were, in fact, delivered, but they were
delivered to a wrong email address (the first one the merchant sent to
paddle when they created my account and not the one I used through the
merchant when I bought) and the email were delivered in spam, so I
didn't see them in the wrong account.

When I found this I used GDPR rights to ask them what data they had
about my "old email address" (the one receiving the email) and they
answered my email address was not in their system, LOL. I sent them
the header of the email received 2 days before and they insisted that
they sent that email to another email address (the one that should
have receveid the email, in fact) but email headers don't lie.

So, I don't know, but maybe they do something weird with email
addresses updates, so maybe the email you're looking for have been
delivered to a different email address ;-)

My last 2 messages have been sent from Postmark (
mta197a-ord.mtasv.net. [104.245.209.197] and mta216a-ord.mtasv.net.
[104.245.209.216] ).

Stefano
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Technical Contact to paddle.com mail platform operator?

[Laura Atkins via mailop]

There are a lot of reasons that ESPs will stop customers from being able to 
mail recipients - recipients who complain, and addresses that bounce, etc. It’s 
possible that it was a global domain block but those are typically rare. The 
other possibility is that the recipient gave the sender a bad address and the 
mail is going to the wrong place. 

The sender is going to have to talk with their vendor to see why the mail isn’t 
leaving the application, or if it is where it’s actually going. 

laura 



> On 6 Jul 2021, at 09:47, Benoit Panizzon via mailop  wrote:
> 
> Hi
> 
>> 2021-06-29 mta214a-ord.mtasv.net [104.245.209.214]
>> 2021-06-29 mta216a-ord.mtasv.net [104.245.209.216]
>> 2020-11-25 mta200a-ord.mtasv.net [104.245.209.200]
> 
> Thank you. I can confirm, other customers (other domains on our
> platform) are getting email from those IP Addresses.
> 
> So maybe Postmark put the domain of that recipient on an internal
> blacklist?
> 
> We had such an issue with AWS SES some time ago, where one of our
> wholesale ISP customer's email domain was put on a SES internal
> 'do not send' list because 'they got a lot of spam complaints' from
> recipients in that domain. No AWS SES Customer could send emails to
> this domain and didn't get any useful error message. It took months for
> Amazon to look into that issue and solve it.
> 
> Mit freundlichen Grüssen
> 
> -Benoît Panizzon-
> -- 
> I m p r o W a r e   A G-Leiter Commerce Kunden
> __
> 
> Zurlindenstrasse 29 Tel  +41 61 826 93 00
> CH-4133 PrattelnFax  +41 61 826 93 01
> Schweiz Web  http://www.imp.ch
> __
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop

-- 
Having an Email Crisis?  We can help! 800 823-9674 

Laura Atkins
Word to the Wise
la...@wordtothewise.com
(650) 437-0741  

Email Delivery Blog: https://wordtothewise.com/blog 







___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Technical Contact to paddle.com mail platform operator?

[Laura Atkins via mailop]

Paddle needs to make the licenses available for download not just by email. 
This is a prime example of why. 

laura 



> On 5 Jul 2021, at 10:02, Benoît Panizzon via mailop  wrote:
> 
> Dear Mailops!
> 
> We have a customer who orders software licenses via paddle.com
> 
> He should get keys via Email. But they never arrive. I also don't see
> any trace of those emails in our logs.
> 
> He got in contact with the Vendor he orders the licenses with. The
> vendor double checked the email address of our customer is correct and
> sent 'test' emails via Paddle.com which paddle.com reports as
> successfully sent. Still I can't see any trace of them in our email
> logs.
> 
> Our customer and the vendor did try to open a technical issue with
> paddle.com but get nowhere as they don't manage to reach any human and
> only get basic 'have you verified recipient email address is
> correct, have you verified your spam-folder' replies from their online
> support agents.
> 
> Does anyone has any contact to a technical person, who could look at
> the logs at the paddle.com side? Or who knows, for which IP range I
> should look to maybe see connections not getting anywhere (like failing
> on TLS or similar).
> 
> -- 
> Mit freundlichen Grüssen
> 
> -Benoît Panizzon- @ HomeOffice und normal erreichbar
> -- 
> I m p r o W a r e   A G-Leiter Commerce Kunden
> __
> 
> Zurlindenstrasse 29 Tel  +41 61 826 93 00
> CH-4133 PrattelnFax  +41 61 826 93 01
> Schweiz Web  http://www.imp.ch
> __
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop

-- 
Having an Email Crisis?  We can help! 800 823-9674 

Laura Atkins
Word to the Wise
la...@wordtothewise.com
(650) 437-0741  

Email Delivery Blog: https://wordtothewise.com/blog 







___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Technical Contact to paddle.com mail platform operator?

[Benoit Panizzon via mailop]

Hi

> 2021-06-29         mta214a-ord.mtasv.net [104.245.209.214]
> 2021-06-29         mta216a-ord.mtasv.net [104.245.209.216]
> 2020-11-25         mta200a-ord.mtasv.net [104.245.209.200]

Thank you. I can confirm, other customers (other domains on our
platform) are getting email from those IP Addresses.

So maybe Postmark put the domain of that recipient on an internal
blacklist?

We had such an issue with AWS SES some time ago, where one of our
wholesale ISP customer's email domain was put on a SES internal
'do not send' list because 'they got a lot of spam complaints' from
recipients in that domain. No AWS SES Customer could send emails to
this domain and didn't get any useful error message. It took months for
Amazon to look into that issue and solve it.

Mit freundlichen Grüssen

-Benoît Panizzon-
-- 
I m p r o W a r e   A G-Leiter Commerce Kunden
__

Zurlindenstrasse 29 Tel  +41 61 826 93 00
CH-4133 PrattelnFax  +41 61 826 93 01
Schweiz Web  http://www.imp.ch
__
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop