Re: docusign fraud using docusign

>
>
> >Time to remove docusign from RCVD_IN_DNSWL_MED and others that subtract
> >points? This is not cool at all.
>
> correct, have you reported it?
>

How do I do that? To the DNSWL group?

I now have a subscription, but they never respond to support requests, even
to numerous emails, including [email protected].

There also appears to be a reference to an automated script using a
key/token, but no information on how to do that. I can't spend time feeding
these into some webform.

>Even without having these rules, there isn't much in the body to catch a
> >docusign phish that uses docusign directly.
>
> >https://pastebin.com/ij2MXi6c
>
> BAYES_00 also says something
>

It's unreasonable to think docusign or Paypal can be trusted? If so, why
would it be DNSWL listed (and others) in the first place?

On 08.11.24 16:48, MX wrote:
> >I would just score anything DNSWL at 0. I mean no disrespect to the
> maintainer of DNSWL but I just don’t find it useful these days. Spam is too
> complex now.
>
> I'd give them small score so I can see they hit
> - unless you want stop using that at all.
>

A small score seems reasonable, but aren't these part of masschecks?

Are docusign/paypal/microsoft/etc scam emails part of masschecks or only
the trusted ones? I just keep hearing about DNS/SPF and other problems with
these domains, but they remain mostly trusted?