One thing's clear: if you send an abuse notification to NiceNIC, it ends up being really 'nice' for the criminals.
This reminded me of an idea for proxy filtering: filtering based on the domain registrar. Another practical use case for the WHOIS history database.
Is there an open and public list of the worst registrars?
#networksecurity #whois #whosis #cybersecurity #abusehandling #csirt
@kubikpixel das sowieso...
@gaycookie But yeah, #Microsoft are assholes more often than not as I've experienved literally in the pas:
They don't do #AbuseHandling but will yeet any #SelfHosted #Mailserver silently if one dares to sent them >100 eMails per day in total per Domain and/or IP Adress - which is easier reached than not if one uses #DeltaChat and in general as all recipients are counted seperately...
Naturally their uses can't alow-list one nor do they see anything in that regard.
@euroinfosec the sheer fact that they needed to be court-ordered says a lot about the #AbuseHandling of #Microsoft and it's Services.
#TooBigToBlock is a serious issue with #eMail, as #Gmail, #Outlook.com & #YahooMail are the primary sources of #Spam and #Malware via eMail...
Alexandre Dulaunoy
Kevin Karhan 
Kevin Karhan 