Live data from Hacker News

Zoho.com CEO says domain with 40M users suspended for abuse complaint

twitter.com

221–230 of 279 posts

Re: Zoho.com CEO says domain with 40M users suspended for abuse complaint

#221
post #5

Zoho CEO here. Our domain was abruptly blocked by our registrar this morning. Our NOC team and myself tried to get in touch with them and they tell us "Contact our legal". Even I could not get in touch with anyone beyond their phone operator. The domain was restored, but as DNS takes time to restore, we are still facing issues. They later claimed there were abuse complaints about Zoho.com emails (which is our persona…

The hell are you complaining about unreachable contacts when your own abuse@ address is dead -

    Arrival-Date: Thu, 30 Aug 2018 00:00:00 +0200 (CEST)

    Final-Recipient: rfc822; abuse@zohocorp.com
    Original-Recipient: rfc822;abuse@zohocorp.com
    Action: failed
    Status: 4.7.1
    Remote-MTA: dns; mx2.zohocorp.com
    Diagnostic-Code: smtp; 451 4.7.1 Greylisted, try again after some time
This is from our MTA after 5 (FIVE) days of trying to deliver you a spam report, with all delivery attempts originating from the same IP.

And that's without getting into why you have a filter on your abuse@ address to begin with.

Re: Zoho.com CEO says domain with 40M users suspended for abuse complaint

#222
post #166
post #132

Earlier quoted context omitted.

Hi Ted. This event seems to have been triggered from abuse complaints - and involved the registrar not reaching out to the client in question. Curiously enough, I had a very similar incident with Namecheap last week: an unsubstantiated email (without subpoena, judge's order, or even validation of who actually sent the email) - was sent to namecheap abuse /alleging/ (correct, no proof) trademark infringement. Namechea…

I obviously can't comment on this without any further information but I have to say that this sounds quite unusual. We have very strict policies regarding due process: https://www.namecheap.com/legal/general/court-order-and-subp... Can you shoot me an email? ted [at] namecheap.com

Here is the second victim with a similar story: https://news.ycombinator.com/item?id=18063667

Is the problem systematic?

Re: Zoho.com CEO says domain with 40M users suspended for abuse complaint

#223
post #219

Earlier quoted context omitted.

I find that abusive.

Yes making sure that people are aware that their personal information is at risk from a company that touts itself as a bastion of privacy. Very abusive. Sorry you feel that way? Downvote me and move along then. We'll let up/downvotes play out and the community can decide just like it's designed to.

Posting this once is ok, twice is questionable, 6 times in one thread is clearly abusive. Please stop now.

Re: Zoho.com CEO says domain with 40M users suspended for abuse complaint

#224
post #187

Earlier quoted context omitted.

Just FYI, I'm one of the maintainers of a mid-size forum regarding opensource virtualization/containers and thus spam is a daily occurrence. While the fight against it is rather dire and no end will ever be in sight, I'll nonetheless never stop (tool assisted) fighting. Anyway, @zoho.com addresses used by spammers started to pop up circa a month ago and increased rapidly in occurrence. As we use stopforumspam to repo…

Second that as we’ve started to see fraud related registration activity from zoho.com around the end of August.

Dear Siv,

Thank you for your notification, will check on this and block those who spam using our system. However please put up an email to abuse at zoho.com so it would help us provide clue to our investigations. Reg Rajasekar Zoho Abuse Monitoring Desk.

Re: Zoho.com CEO says domain with 40M users suspended for abuse complaint

#225
post #94

Earlier quoted context omitted.

If you’re providing email service, you should be actively monitoring public blacklists, not waiting for your registrar or hosting company to notify you. Even if your domain isn’t banned, your users’ emails may be bounced by other servers. That you don’t seem to know any of this means you aren’t employing the right people.

I'm pretty sure you're over inferring stuff from that post. It's not credible that 20+ years old company serving email for millions of users wouldn't know the most basic stuff about running an email server, don't you think?

And yet here we are.

Re: Zoho.com CEO says domain with 40M users suspended for abuse complaint

#226

Earlier quoted context omitted.

I've been very happy with MarkMonitor. They have good customer service, a good reputation, and best of all, they auto-renew domains and send an invoice. That means that the failure mode is "domain is renewed, I owe them a check." If your domains are riding on a credit card, you potentially have a failure mode of "card was declined, my domain did not renew, everything is down."

How much does markmonitor cost ? There is no pricing anywhere.

My invoices say $20/yr per .com; other TLDs are more expensive. Because we have a ton of domains we spend over $20k a year with them. I'm sure there is a minimum but I don't know what it is these days.

I would not say MarkMonitor is a tool for startups. It's a tool for organizations that would lose a lot if they lost a domain. I bet Zoho wishes they could go back in time and spend $10k to avoid this problem they had.

Re: Zoho.com CEO says domain with 40M users suspended for abuse complaint

#227

Earlier quoted context omitted.

If you’d like to use a strong captcha approach without using a competitor you might want to check out http://funcaptcha.com (I have no affiliation, have heard good things and been presented it on a couple of sites)

The "Book Demo" button and "read white paper" button seem to be broken, which does not inspire much confidence. The first button just takes me to the bottom of the page while the second button does nothing. Not sure if this is the same, but I once came across a website with a captcha where you had to rotate a dog so it stood upright, but it was lagging so bad that it would skip several frames, making it impossible to…

Both buttons work for me on mobile. Can't be sure, but that page looks like a JavaScript heavy "single page app" type situation, so if your JS is turned off that might explain things.

Incidentally, both links just pop up a sign-up form.

Re: Zoho.com CEO says domain with 40M users suspended for abuse complaint

#228
Its not like Zoho is known for their high availability anyways, their domain not being reachable is just par for the course.

Also since it said "suspended for abuse complaint", I would almost immediately assume the Zoho just didn't properly handle abuse claims and its their fault.

Needless to say I have a incredibly low opinion about their "service" based on having used their mail product for almost a year (switched to google afterward).

Re: Zoho.com CEO says domain with 40M users suspended for abuse complaint

#229
post #97

Earlier quoted context omitted.

It sounds like the spammers found a way to automatically create new @zoho.com email accounts, and the single way to stop them might be using a CAPTCHA service from the direct competitor, Google. At least that was the unfortunate case for the privacy focused German email provider Mailbox.org[1]: > We recently detected activities on our servers where bot nets were used to create hundreds of thousands of e-mail accounts…

If you’d like to use a strong captcha approach without using a competitor you might want to check out http://funcaptcha.com (I have no affiliation, have heard good things and been presented it on a couple of sites)

The link redirects to some other site now.

Re: Zoho.com CEO says domain with 40M users suspended for abuse complaint

#230
post #52
post #4

This is why you register your domain with MarkMonitor or Cloudflare. I cannot comprehend why they were so stupid to use a registrar that is not corporate oriented. This is just unreal.

The domain was registered in 2004; MarkMonitor was around then, but Cloudflare wasn't. I was involved in moving a domain to MarkMonitor in 2013; at that time, they had a rather steep minimum spend to get on their platform, and they barely wanted to talk to us.

You can transfer a domain name to a different registrar.
Post reply on HN