groupboard

Seems to be a lot of spam from zoho recently, and reports are still disabled. One spammer (techtimes.com) I reported to abuse@zohocorp.com, and they replied "Thank you for bringing this issue to our attention. Based on your complaint, we will take punitive action to make sure this will not repeat itself in the future." However, a week later we got another spam from techtimes.com, addressed to a different address, so I'm wondering if they just listwash complaints.

Yeah, I've used that form in the past, but nothing happens and spam keeps coming from the same people even if you report them multiple times. There is also the abuse@google.com address, and it is just as useless. Yes, hotmail is the same, although their spam volume seems to be lower than that coming from gmail at the moment (at least for me).

I came across this topic as most of the spam that gets through my spam filter is from gmail. Today I got one phishing email, one "I hope you don't mind me being persistent...do you want me to write a blog post" and one "did you get my email" from a random gmail. I reported them all through spamcop, but not sure if there's any point. None of these emails are all that easy to detect (other than perhaps the blog post one), but would be trivial for google to block. I suspect they automatically put these types of emails in the spam folder for gmail users, but when sending *out* of gmail they don't seem to bother doing anything. Checking for gmailapi isn't useful because a lot of legitimate emails use gmail api.

Still getting these newswatchtv spams, but I see the ip in question (smtp13-ia4-sp1.mta.salesforce.com [13.110.74.236]) is on the SORBS spam list. My spam filter does actually check salesforce emails against SORBS spam. (I don't do that for all emails, as it can have quite a few false positives, but for stuff like salesforce that's fine). The reason it got through the spam filter is because I reduce the spam score when our company name is used in the email (which it was for this spam). So I just need to either rethink my heuristics, or else badger salesforce some more.

No, salesforce don't have my details, just the spammers using salesforce.

You can see two of the spams here: https://pastebin.com/r1kdNGc9 https://pastebin.com/4Yybr1NP One has an unsubscribe, one doesn't. I just noticed the eco.de complaint address, so I've sent a complaint there.

I'm not sure what you're getting at here. The problem is simply that salesforce doesn't do anything about spam reports and they have now confirmed that. The spams have been sent to various email addresses on our network from various spammers. Some have unsubscribe links, others (such as newswatch TV) don't have any unsubscribe links. I won't be reporting any further salesforce spam, as it's a waste of time. The spammers presumably purchase lists of email addresses that have been scraped from websites, or guessed from linkedin and then sold. None of the spammers in question had any contact with us previously. Basically just the same as all other spam.

Exacttarget is owned by salesforce. Monday's newswatchtv spam came from 13.110.74.235 (smtp12-ia4-sp1.mta.salesforce.com), and that spammer was previously reported to abuse@salesforce.com and security@salesforce.com multiple times (due to multiple spams from them) in Nov 2020.

The problem seems to be that salesforce doesn't do anything about spam. Their abuse address is abuse@salesforce.com, but it is a big black hole. I contacted them on twitter and they said to forward the reports to security@salesforce.com, which I did. They claimed they would look into them, and the spam did seem to stop. However a week ago I got a spam from exacttarget (now owned by salesforce) and I forwarded it to security@salesforce.com. The reply I got was that they had unsubscribed the recipient email address from the mailing list, along with a screenshot of said unsubscribe! I replied saying I didn't want to unsubscribe, but was reporting spam, and asked what they intended to do. I haven't gotten a reply. And now this morning I see a spam from newswatchtv, the same spammer I reported to their security@salesforce.com in November 2020 (after them saying that reporting the spam there would get it resolved). This was from smtp12-ia4-sp1.mta.salesforce.com [13.110.74.235], the main salesforce network (not exacttarget). So, basically they are a huge waste of time, and I don't think I have ever received any legitimate emails via salesforce and am considering blocking their entire network if I can easily figure out their ip ranges.