Don't even get me started on SendGrid..
two years on and the same actors are still abusing their systems.. We
attempted to reach out to help them with this problem, and ended up with
them not able to do anything .. upper level didn't want the change..
So much phishing from their IPs.. this isn't just a spam problem.
Their shared IPs are the worst, transparency needs work, and they don't
interact with threat teams..
Any time a companies practices are responsible for ordinary people
getting hacked, loosing money, fraud.. frankly, have no sympathy..
Too funny though, when their IPs end up on RBL's, I don't think they
even care..
Frankly, many ESP's fraud/security departments have seemed to have gone
down hill the last couple of years.
On 2024-10-14 03:31, Paul Menzel via mailop wrote:
Dear mail operators,
Since at least September 17th, 2024, we receive a lot of unsolicited
messages from SendGrid. I forwarded five to ab...@sendgrid.net, but
there was no reply and the problem persists. Today at least five
messages from xvfrkpcc.outbound-mail.sendgrid.net [168.245.19.204]
slipped the spam filter and three with the same subject were blocked, so
SendGrid should have gotten at least some feedback.
This time the phishing URL in the message is
https://doc[.]hr-desk-department[.]com/mo4/mod.jsp?top=someth...@molgen.mpg.de
Is there something else I can do despite forwarding messages to
ab...@sendgrid.net? Should SendGrid do better? (At least they have an
abuse address in contrast to Google Mail requiring reports to copy and
past parts of a message to a Web form.)
Kind regards,
Paul
PS: Header excerpt:
Received: from xvfrkpcc.outbound-mail.sendgrid.net
(xvfrkpcc.outbound-mail.sendgrid.net [168.245.19.204])
by c1241.mx.srv.dfn.de (Postfix) with ESMTPS id 65481600F5
for <meiss...@molgen.mpg.de>; Mon, 14 Oct 2024 12:06:36 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=ease-servicesgroup.com;
h=content-type:from:mime-version:subject:reply-to:to:list-unsubscribe:
list-unsubscribe-post:cc:content-type:from:subject:to;
s=s1; bh=U7N4y/Ry+I3sfP3WHrzcEmwz9l36d3Mi0VNYQpzxfVs=;
b=nWv2BmwqCrFotddVn3xPbe+L4n/6wVFghJGERAhOQzFcMDre2Kd9NnU2ldh92TfFm/Lm
YuUDSrme+JlexFfOWoGVPak07SC1nT3pUOf3wG64/Lv1R2i/uMnHnD1rt6n3sATTaleLYP
E0tH+/9/xx5GdKIFqcSSSrVI7MhAzzrEcnYR/MyD8eSo8B9L1l5dO0hvaNZzRI5fB0pWK5
Q7RhQmpnnzwlv1JMqkh+fq3wumRszs50/KSDDDh3Z61ZDK4f2CRRpSm+69VQ/n8yYGWvug
WGfnhIjHS3hELuy8Lv/2werx69oHeV6YVTRJyoStzmirngWsaL8Ce9x2xPPDVeqw==
Received: by recvd-78b9697b7d-kp2cq with SMTP id
recvd-78b9697b7d-kp2cq-1-670CEC66-36
2024-10-14 10:03:18.469218522 +0000 UTC m=+2736439.469406983
Received: from NDc1MDE3MDM (unknown)
by geopod-ismtpd-35 (SG) with HTTP
id bnpIbHmzSVmcvRtiDGNhvw
Mon, 14 Oct 2024 10:03:18.417 +0000 (UTC)
Content-Type: multipart/alternative;
boundary=795ea38de6285bbd332f8f29f31f9cdc2d1c8743ab7def25052431d0c760
Date: Mon, 14 Oct 2024 10:03:20 +0000 (UTC)
From: HR Department <hr-department.ad...@ease-servicesgroup.com>
Mime-Version: 1.0
Message-ID: <bnpIbHmzSVmcvRtiDGNhvw@geopod-ismtpd-35>
Subject: New Memo: meiss...@molgen.mpg.de - Annual Compliance Report
Reply-To: hr-department.ad...@ease-servicesgroup.com
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Reg. TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
