Jump to content

groupboard

Members
  • Posts

    12
  • Joined

  • Last visited

Posts posted by groupboard

  1. Seems to be a lot of spam from zoho recently, and reports are still disabled.

    One spammer (techtimes.com) I reported to abuse@zohocorp.com, and they replied "Thank you for bringing this issue to our attention. Based on your complaint, we will take punitive action to make sure this will not repeat itself in the future." However, a week later we got another spam from techtimes.com, addressed to a different address, so I'm wondering if they just listwash complaints.

  2. 21 hours ago, petzl said:

    You will be assimilated, Hotmail spam is also annoying,
    From outside Gmail you can report their spammer but by the notorious  web page/form
    https://support.google.com/mail/contact/abuse
    Tutorial here
    https://www.wikihow.com/Report-a-Gmail-Account#:~:text=Things You Should Know,Submit to send the report.

    Yeah, I've used that form in the past, but nothing happens and spam keeps coming from the same people even if you report them multiple times. There is also the abuse@google.com address, and it is just as useless.

    Yes, hotmail is the same, although their spam volume seems to be lower than that coming from gmail at the moment (at least for me).

  3. I came across this topic as most of the spam that gets through my spam filter is from gmail. Today I got one phishing email, one "I hope you don't mind me being persistent...do you want me to write a blog post" and one "did you get my email" from a random gmail. I reported them all through spamcop, but not sure if there's any point. None of these emails are all that easy to detect (other than perhaps the blog post one), but would be trivial for google to block. I suspect they automatically put these types of emails in the spam folder for gmail users, but when sending *out* of gmail they don't seem to bother doing anything.

    Checking for gmailapi isn't useful because a lot of legitimate emails use gmail api.

  4. Still getting these newswatchtv spams, but I see the ip in question (smtp13-ia4-sp1.mta.salesforce.com [13.110.74.236]) is on the SORBS spam list.

    My spam filter does actually check salesforce emails against SORBS spam. (I don't do that for all emails, as it can have quite a few false positives, but for stuff like salesforce that's fine). The reason it got through the spam filter is because I reduce the spam score when our company name is used in the email (which it was for this spam). So I just need to either rethink my heuristics, or else badger salesforce some more.

  5. 19 hours ago, petzl said:

    Can you give a URL for a SpamCop track Before you submit a report it is at top of page.
    Do they have a unsubscribe link? Not seeing salesforce are Blackhats?
    abuse[ AT]c[DOT]exacttarget[DOT]com add to next report

    You can see two of the spams here:

     

    https://pastebin.com/r1kdNGc9

    https://pastebin.com/4Yybr1NP

    One has an unsubscribe, one doesn't.

    I just noticed the eco.de complaint address, so I've sent a complaint there.

  6. 6 hours ago, petzl said:

    Can you give a URL for a SpamCop track Before you submit a report it is at top of page.
    Do they have a unsubscribe link? Not seeing they are Blackhats?
    Had problems with kindle Amazon giving my credit card (CC) details to Audio books. my kindle don't do audio. but they are pushy/scamy (not first time, always cancel their "free" offer in buying a Kindle book), they then without asking signed me up for a "free" 14 day trail,
    Then did a zero amount check on my CC the moment they did this.
    My bank sent a auto SMS Alert, do I recognize "CLIENTCONNECT.AI", I replied no and card is considered compromised so deactivated.
    A real pain be a long while before I use Amazon again.
    Sounds like your details have been also passed on maybe?

    I'm not sure what you're getting at here. The problem is simply that salesforce doesn't do anything about spam reports and they have now confirmed that. The spams have been sent to various email addresses on our network from various spammers. Some have unsubscribe links, others (such as newswatch TV) don't have any unsubscribe links. I won't be reporting any further salesforce spam, as it's a waste of time.

    The spammers presumably purchase lists of email addresses that have been scraped from websites, or guessed from linkedin and then sold. None of the spammers in question had any contact with us previously. Basically just the same as all other spam.

  7. 20 hours ago, petzl said:

    13.110.74.235 abuse address is not salesforce?
    It is abuse[ AT]c[DOT]exacttarget[DOT]com at least that is what my Wuois comes up with?

    Exacttarget is owned by salesforce. Monday's newswatchtv spam came from 13.110.74.235 (smtp12-ia4-sp1.mta.salesforce.com), and that spammer was previously reported to abuse@salesforce.com and security@salesforce.com multiple times (due to multiple spams from them) in Nov 2020.

  8. The problem seems to be that salesforce doesn't do anything about spam. Their abuse address is abuse@salesforce.com, but it is a big black hole. I contacted them on twitter and they said to forward the reports to security@salesforce.com, which I did. They claimed they would look into them, and the spam did seem to stop.

    However a week ago I got a spam from exacttarget (now owned by salesforce) and I forwarded it to security@salesforce.com. The reply I got was that they had unsubscribed the recipient email address from the mailing list, along with a screenshot of said unsubscribe! I replied saying I didn't want to unsubscribe, but was reporting spam, and asked what they intended to do. I haven't gotten a reply.

    And now this morning I see a spam from newswatchtv, the same spammer I reported to their security@salesforce.com in November 2020 (after them saying that reporting the spam there would get it resolved). This was from smtp12-ia4-sp1.mta.salesforce.com [13.110.74.235], the main salesforce network (not exacttarget).

    So, basically they are a huge waste of time, and I don't think I have ever received any legitimate emails via salesforce and am considering blocking their entire network if I can easily figure out their ip ranges.

×
×
  • Create New...