This is normally an issue when it comes to SaaS solutions offering a free trial 
that happens to allow outbound email sending. Scammers will use it as many tend 
to trust the source. This is true for many senders as I still get at least 1-3 
fake document shares a week on my personal Google account. 

Thanks,
 
Michael Irvine 

-----Original Message-----
From: mailop <mailop-boun...@mailop.org> On Behalf Of Benoit Panizzon via mailop
Sent: Monday, May 13, 2024 10:05
To: mailop@mailop.org
Subject: [mailop] Phishing hosted by Cloudflare-ipfs.com / Abuse Handled by 
Sparkpostmail.com?

CAUTION: This email originated from outside of the organization. Do not click 
any links or open attachments unless you recognize the sender and know the 
content is safe.



Hi all

Our customers increasingly get phishing emails targeting our email platform 
accessible under the domain: Cloudflare-ipfs.com (interplanetary file system, I 
guess that is their name for CNS).

I reported some of those to the cloudflare abuse desk.

To my surprise, after usually 1 or two days I get a replies From:
"Cloudflare" <ab...@sparkpostmail.com> about them blocking some of the single 
URL we report.

So is sparkpostmail.com linked to cloudflare?

Unfortunately the basic issue is not being addressed. The phishers seem to be 
able to generate new URI under cloudflare-ipfs.com much faster than 
ab...@spakpostmail.com is able to block them.

Even SpamAssassin now has a rule matching those:

URI_CLOUDFLAREIPFS References Interplanetary File System PtP
                            content via CloudFlare, likely phishing

Mit freundlichen Grüssen

-Benoît Panizzon-
--
I m p r o W a r e   A G    -    Leiter Commerce Kunden
______________________________________________________

Zurlindenstrasse 29             Tel  +41 61 826 93 00
CH-4133 Pratteln                Fax  +41 61 826 93 01
Schweiz                         Web  http://www.imp.ch
______________________________________________________
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to