News for hackers. Stuff that matters.
Re:Don't verify email addresses by sending spam to them by maxspero on Tuesday June 23, 2026 @08:55PM (#48653766)
Hey! Founder of Pangram here. We use Zerobounce and CustomerIO for email validation. I had no idea this was happening. Not entirely sure which one this is coming from, but this is not intentional on our part. Will dig deeper and eliminate the part of the stack that is sending spam — definitely not good that this is happening.
Re:Don't verify email addresses by sending spam to them by technion on Wednesday June 24, 2026 @12:10AM (#48654991)
I'm reading the ZeroBounce docs and it seems very relevant. Look at this step:

"We recheck all unknown emails using IPs from different geographical locations". This matches exactly what this article describes as getting these emails from a range of locations.

The step before that is just "Proprietary Technology", which sounds like a good cover for what's going on here. How else are you testing an email address after between "real time SMTP server check"?

Re:Don't verify email addresses by sending spam to them by maxspero on Wednesday June 24, 2026 @06:27PM (#48666352)
Follow-up: our vendors have told us that they do not send any emails as part of the validation process. Either somebody is lying, or there's something even weirder going on. We still have more tests to run to isolate which software package it could be.
Re:Don't verify email addresses by sending spam to them by maxspero on Thursday June 25, 2026 @11:27AM (#48674849)
Update: this is actually ZeroBounce’s Verify+ feature which we figured out after some escalation. It’s now disabled!