Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-11 Thread Matt Harris via mailop
On Tue, Aug 11, 2020 at 2:21 PM Michael Orlitzky via mailop < mailop@mailop.org> wrote: > In the past few months there have been several threads on mailop and > similar lists (sdlu, spamassassin-users, nanog, ...) complaining about > how SendGrid doesn't seem to do anything at all to stop the ongo

Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-11 Thread Michael Orlitzky via mailop
On 2020-08-11 16:53:46, Benoit Panizzon via mailop wrote: > > Now a sendgrid customers complains to us, that his emails are being > rejected because of this listing. > > But that makes me wonder: Doesn't sendgrid deal with such issues like > asking for delisting after blocking the sender itself a

Re: [mailop] [OFFLIST] Re: Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-11 Thread Michael Peddemors via mailop
On 2020-08-11 9:39 a.m., Michael Peddemors via mailop wrote: Hi Len, DOH! Sorry about that Len.. and list.. -- "Catch the Magic of Linux..." Michael Peddemors, President/CEO LinuxMagic Inc. Visit us at http://www.linux

Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-11 Thread Adam D. Barratt via mailop
On Tue, 2020-08-11 at 09:22 -0700, Len Shneyder via mailop wrote: > Thanks for pointing this out and I'm sorry you're still seeing what > sounds like a high volume of phish. I've asked our fraud ops team to > investigate this. In the future if you could send suspicious emails > to ab...@sendgrid.co

[mailop] [OFFLIST] Re: Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-11 Thread Michael Peddemors via mailop
Hi Len, We have been extremely busy over here, so I haven't had a chance to circle back around, but for the record, volumes are still excessive, and our team is detected malicious, easily identifiable spam on a regular basis.. Received: from o2.hv1nn.shared.sendgrid.net (HELO o2.hv1nn.share

Re: [mailop] [EXTERNAL] Re: Comcast contact?

2020-08-11 Thread Brotman, Alex via mailop
Responding to Brett offlist as well. Thanks -- Alex Brotman Sr. Engineer, Anti-Abuse & Messaging Policy Comcast From: mailop On Behalf Of Brett Schenker via mailop Sent: Tuesday, August 11, 2020 11:37 AM To: Aaron C. de Bruyn via mailop Subject: [EXTERNAL] Re: [mailop] Comcast contact? I sho

[mailop] ReliableSite Contact

2020-08-11 Thread Ashley Rodriguez via mailop
Hey y'all. I was curious if anyone on here has a contact for or has recently had luck with reliablesite.net. We found some active phishing sites and it's been over 5 days on the takedown request. I've updated the ticket a few times and no luck yet. Just curious to see if anyone else is facing the

Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-11 Thread Len Shneyder via mailop
Hello Benoit and Hokan, Thanks for pointing this out and I'm sorry you're still seeing what sounds like a high volume of phish. I've asked our fraud ops team to investigate this. In the future if you could send suspicious emails to ab...@sendgrid.com we will get this handled. Feel free to CC me wh

Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-11 Thread Hans-Martin Mosner via mailop
Am 11.08.20 um 16:53 schrieb Benoit Panizzon via mailop: > Hi List > > o1678912x138.outbound-mail.sendgrid.net [167.89.12.138] and IP under > control of sendgrid was repeatedly involved in phishing and other spam > since June. > > It ended up being blacklisted @ SWINOG. > > Now a sendgrid customers

Re: [mailop] Comcast contact?

2020-08-11 Thread Brett Schenker via mailop
I should add, so that folks don't just think "grey listing," that some emails are being delivered twice so something is up either at our mailer or on Comcast, so trying to narrow it down and need some help. On Tue, Aug 11, 2020 at 10:27 AM Brett Schenker wrote: > I was hoping there's someone on

Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-11 Thread Hokan via mailop
I've instituted short-term blocks of Sendgrid mail several times this year and started another today because it looks like as much as a third of the mail they've sent us in the past week has been evil -- mostly phishing. This is a problem for me because some of the mail Sendgrid sends is wanted by

[mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-11 Thread Benoit Panizzon via mailop
Hi List o1678912x138.outbound-mail.sendgrid.net [167.89.12.138] and IP under control of sendgrid was repeatedly involved in phishing and other spam since June. It ended up being blacklisted @ SWINOG. Now a sendgrid customers complains to us, that his emails are being rejected because of this lis

[mailop] Comcast contact?

2020-08-11 Thread Brett Schenker via mailop
I was hoping there's someone on here that might be with Comcast I can chat with. We're seeing some issues with them where the email sends but then isn't delivered for multiple days later and get the 250ok response. It could be grey listing, it could be something else but hoping to see if there was

Re: [mailop] spearphishing

2020-08-11 Thread Marc Ballarin via mailop
Hi, please report issues like this to the abuse contact given in WHOIS, i.e. ab...@1and1.com. Please always include complete headers or the complete mail as an attachment and clearly mention that this is phishing. You could also report this to Oracle's cloud abuse contact for the URL. perfor