Re: [mailop] Gosh I love sendgrid
Wow. I’m used to weird text from some source being copied and pasted, and I’m used to obvious phishing language, but I think this is the first time I’ve seen both in one email. It’s very jarring. > On Sep 11, 2021, at 8:23 PM, John R Levine via mailop > wrote: > > Today's phish, sent directly from sendgrid to my father who has been dead > since 2019. > > Relevant Received headers in the unlikely event anyone might want to track it > down: > > Received: from o3.ptr4431.ordersnapp.com (o3.ptr4431.ordersnapp.com > [167.89.47.140]) by mail1.iecc.com ([64.57.183.56]) > with ESMTPS via TCP (port 20674/25) id 682323596 > tls TLS1_3_ECDHE_RSA_AES_128_GCM_AEAD sni mx1.gurus.org; 11 Sep 2021 > 18:41:35 - > Received: by filterdrecv-55446c4d49-sgpf9 with SMTP id > filterdrecv-55446c4d49-sgpf9-1-613CF85E-32 >2021-09-11 18:41:34.618842626 + UTC m=+850909.425078822 > Received: from EC2AMAZ-GM5P31T.ec2.internal (unknown) >by geopod-ismtpd-3-0 (SG) with ESMTP id PyG_AmsvSzySaVHEQAwcBQ >for ; Sat, 11 Sep 2021 18:41:34.502 + (UTC) > > Regards, > John Levine, jo...@taugh.com, Primary Perpetrator of "The Internet for > Dummies", > Please consider the environment before reading this e-mail. https://jl.ly > > -- Forwarded message -- > Date: Sat, 11 Sep 2021 14:41:34 > From: Security Center > To: xxx > Subject: Account Security Update 11 September, 2021 > > [DZGVOMC.png] > We recently detected an unusual activity, We are sorry for the inconvience > caused. Hope you are safe at home Ꭰеаr chase member, > I'm not the only one here who's not married.We recently detected an unusual > activity. tay Safe Stay Homeon yoI'm not the only one here who's not > married.ur J.P MorgI'm not the only one here who's not married.an CI'm not > the only one here who's not married.hase online banking account. UnfortuI'm > not the only one here who's not married.na tely, we had to suspend your > online bankiI'm not the only one here who's not married.ng in order to ensure > the safety of your account. I'm not the only one here who's not married.This > suspension is temporary. We require some additional information. I'm not the > only one here who's not married.We are sorry for the inconvience caused. > Verify now > Sincerely, > ChaI'm not the only one here who's not married.se BanI'm not the only one > here who's not married.king > > ___ > mailop mailing list > mailop@mailop.org > https://list.mailop.org/listinfo/mailop ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
[mailop] Gosh I love sendgrid
Today's phish, sent directly from sendgrid to my father who has been dead since 2019. Relevant Received headers in the unlikely event anyone might want to track it down: Received: from o3.ptr4431.ordersnapp.com (o3.ptr4431.ordersnapp.com [167.89.47.140]) by mail1.iecc.com ([64.57.183.56]) with ESMTPS via TCP (port 20674/25) id 682323596 tls TLS1_3_ECDHE_RSA_AES_128_GCM_AEAD sni mx1.gurus.org; 11 Sep 2021 18:41:35 - Received: by filterdrecv-55446c4d49-sgpf9 with SMTP id filterdrecv-55446c4d49-sgpf9-1-613CF85E-32 2021-09-11 18:41:34.618842626 + UTC m=+850909.425078822 Received: from EC2AMAZ-GM5P31T.ec2.internal (unknown) by geopod-ismtpd-3-0 (SG) with ESMTP id PyG_AmsvSzySaVHEQAwcBQ for ; Sat, 11 Sep 2021 18:41:34.502 + (UTC) Regards, John Levine, jo...@taugh.com, Primary Perpetrator of "The Internet for Dummies", Please consider the environment before reading this e-mail. https://jl.ly -- Forwarded message -- Date: Sat, 11 Sep 2021 14:41:34 From: Security Center To: xxx Subject: Account Security Update 11 September, 2021 [DZGVOMC.png] We recently detected an unusual activity, We are sorry for the inconvience caused. Hope you are safe at home Ꭰеаr chase member, I'm not the only one here who's not married.We recently detected an unusual activity. tay Safe Stay Homeon yoI'm not the only one here who's not married.ur J.P MorgI'm not the only one here who's not married.an CI'm not the only one here who's not married.hase online banking account. UnfortuI'm not the only one here who's not married.na tely, we had to suspend your online bankiI'm not the only one here who's not married.ng in order to ensure the safety of your account. I'm not the only one here who's not married.This suspension is temporary. We require some additional information. I'm not the only one here who's not married.We are sorry for the inconvience caused. Verify now Sincerely, ChaI'm not the only one here who's not married.se BanI'm not the only one here who's not married.king ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
Re: [mailop] Any one else seeing SenderScore going crazy?
Same thing keeps happening with me and Comcast. Some users swear up and down that they're merely using the delete button and not the spam button too, but I suppose that's really up to comcast how they route the behavior. On 2021-09-09 23:03, Tom Bartel via mailop wrote: Michael, Our FBL system for mailbox providers, including OpenSRS, takes complaint feeds in one side and matches/relays to authenticated sender subscribers such as yourself. We do see instances of users at various mailbox providers cleaning out old inboxes en masse via a spam button versus a delete button. The system will process accordingly. This is one explanation for such a burst from the past and to prior domains on your system. If you are seeing more of this we'd be happy to look deeper - please just send an inquiry to datahelp @ validity . com. Thanks, Tom On Thu, Sep 9, 2021 at 10:29 AM Michael Peddemors via mailop wrote: Seems to be trying to send some kind of backlog.. (flood of reports) Not only are the messages NOT SPAM, but we don't even host the domains in question any more ;) But again, something is wrong with the way they do business.. Dec 2019? Really? This is a OpenSRS Abuse Report for an email message received from domain , IP 104.128.152.139, on Fri, 06 Dec 2019 00:39:35 +. Subscription-Link: https://fbl.returnpath.net/manage/subscriptions/498775 User-Agent: ReturnPathFBL/2.0 Original-Rcpt-To: Source-Ip: 104.128.152.139 Abuse-Type: complaint Reported-Domain: -- "Catch the Magic of Linux..." Michael Peddemors, President/CEO LinuxMagic Inc. Visit us at http://www.linuxmagic.com @linuxmagic A Wizard IT Company - For More Info http://www.wizard.ca "LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd. 604-682-0300 Beautiful British Columbia, Canada This email and any electronic data contained are confidential and intended solely for the use of the individual or entity to which they are addressed. Please note that any views or opinions presented in this email are solely those of the author and are not intended to represent those of the company. ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop -- Phone: 303.517.9655 Twitter: @barteltom Instagram: https://instagram.com/bartel_photo "The Time Is Always Right To Do What Is Right" - Martin Luther King Jr. ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
