Phishing Scams coming from Sendgrid Address Space
This is a recent notice I just sent to abuse@sendgrid.net. If you operate a mail server with a customer base, you may wish to check your logs for similar activity.
I just sent you a complaint regarding phishing scams from 208.117.60.60 and notification that I have now blocked this address because of similar phishing scams that occurred yesterday and an inadequate response on your part to address them.
I am now adding 208.117.60.62 to the list. If this continues I will add the entire address block.
I have posted the following for my customers:
-----
I have had to block two IP addresses from Sendgrid because they are being used in phishing scams to try to obtain customers Netflix credentials.
I sent a complaint yesterday, received a response that action had been taken but received two more phishing scams from them today. As a result I have blocked the following two IP addresses:
208.117.60.60 and 208.117.60.62
I do not like to block addresses from sendgrid because I know they have legitimate customers like Ticketmaster that then end up having their mail refused, BUT I can not permit their lack of security to jeopardize the security of my customers and when they will not take effective action nor specify the players or the action that they have taken, it leaves me no other recourse.
-----
This will be retained and also sent to any legitimate customers that get blocked as a result.
If you wish this block to be removed, I will need specific information since previous assurances that the issue has been dealt with were obviously false as evidenced by it recurring twice within 24 hours.
-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-
Eskimo North Linux Friendly Internet Access, Shell Accounts, and Hosting.
Knowledgeable human assistance, not telephone trees or script readers.
See our web site: eskimo.com/ (206) 812-0051 or (800) 246-6874.
---------- Forwarded message ----------
Date: Wed, 16 Nov 2022 09:51:56 +0000 (UTC)
From: Help Center <5001341netflix.co.za@em8487.neurodiversenutritionrd.com>
To: nanook@eskimo.com
Subject: Netflix : We're having some trouble with your current billing
information
Spam detection software, running on the system "mx2.eskimo.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
support@eskimo.com for details.
Content preview: Your account is on hold. Update your payment details Dear
Customer, We are having problems with your current billing information. We
will try again, but in the meantime, you may want to update your p [...]