Can anyone reproduce this, or was it a coincidence?

Before account creation

to=<[email protected]>, relay=dnvexwsavin1.avertlabs.com[161.69.31.165]:25, delay=67, delays=6.6/0.02/1.5/59, dsn=5.0.0, status=bounced (host dnvexwsavin1.avertlabs.com[161.69.31.165] said: 550 Denied by policy (in reply to end of DATA command))

After account creation

to=<[email protected]>, relay=dnvexwsavin1.avertlabs.com[161.69.31.165]:25, delay=75, delays=12/0.03/1.5/61, dsn=2.0.0, status=sent (250 Requested mail action okay, completed.)

Correct email: [email protected]

Attached is their contact web page translated using Google Translate.

In my opinion consumers cannot use PKI encryption, so the vendor rejects submitting samples.

False Positive
Email: [email protected]
Please use PKI encryption when submitting samples, false positive and other information to avoid data leaks in network communication.
Download the Public Key for false positive here.
Download the Public Key for submitting & other information here.

If not, we cannot solve your problems. And we are really sorry for the inconvenience.
https://www.antiy.net/contacts/

Received this e-mail

Hi Namazso,

This is Eric Chang, the RD VP of Lionic corporation. Nice to meet you virtually.

I noticed that you published the following two URL -

https://github.com/namazso/VirusTotal-FPContacts

#4

Please allow me to explain two issues -

Actually our newsletter is very easy to unsubscribe.

However, I apologize for feeling our newsletter as spam and promise that we will not automatically subscribe anyone who email to [email protected] mailto:[email protected] and [email protected] mailto:[email protected] from now on.

Please remove Lionic from "Shame of Wall" of "https://github.com/namazso/VirusTotal-FPContacts" https://github.com/namazso/VirusTotal-FPContacts .

In "#4" #4 ,

you mentioned "Don't email [email protected] mailto:[email protected] , doing so automatically signs you up for their newsletter".

Please also remove the above line.

AegisLab is the subsidiary security research laboratory of Lionic.

Due to company policy changed, we decided to focus on Lionic brand.

You may check this on the homepage of https://www.aegislab.com/.

Please replace the AegisLab line in the "Table" of "https://github.com/namazso/VirusTotal-FPContacts" https://github.com/namazso/VirusTotal-FPContacts as { Lionic , https://www.lionic.com/reportfp/ }.

Anyway, we apologize the inconveniences and are willing to improve ourselves.

Therefore, we wish you can help modifying your article.

We want to contribute some of our network security efforts to the Internet community.

Thanks a lot!

--

[redacted]
T / [redacted]
E / [redacted] Lionic Corporation / https://www.lionic.com/

============================================================================
NOTICE: This message is from Lionic Corporation or its security research laboratory, AegisLab. The whole message including all attachments is CONFIDENTIAL, proprietary and legally privileged. If you are not the intended recipient, you should not disclose, copy or distribute this email.
Please reply to this message and follow with its deletion.
Copyright @ Lionic Corp.

[email protected] bounces

<[email protected]>: host m1.feishu.cn[130.44.212.200] said: 550 verify address failed, User not found [email protected] (in reply to RCPT TO command)

and Kingsoft hasn't submitted their program to AV-TEST since 2014: https://www.av-test.org/en/antivirus/home-windows/manufacturer/kingsoft/

1. Don't email [email protected], doing so automatically signs you up for their newsletter

2. ZoneAlarm uses Kaspersky's AV engine, any detection issues should be submitted to https://opentip.kaspersky.com/

3. K7AntiVirus / K7GW's submission address is now [email protected], zipcrypto with "infected". [email protected] bounces due to google oh-so-helpfully rejecting encrypted archives

4. [email protected] rejected both an email with and an email without an attachment from a protonmail.com domain email address and did not respond to a query to from a gmail.com domain email address

Mail to [email protected] is now returned to sender

<[email protected]>: host mx.maillb.baidu.com[12.0.243.41] said: 550 5.1.1

<[email protected]>... User unknown (in reply to RCPT TO command)

I think this is the right place to submit https://csi.forcepoint.com/

https://www.deepinstinct.com/contact-us

[email protected]

Thanks for your inquiry. Our team at Deep Instinct or one of our partners will get back to you soon.

More than 24 hours passed since then.

Original-Recipient: rfc822;[email protected]
Action: failed
Status: 5.4.4
Diagnostic-Code: X-Yandex; Host or domain name not found

Hello,
Can you add the vendor "Certego", their email is : [email protected]
Thanks

[email protected]

Send as zipcrypto'd .zip with password "infected", 20 MB limit. Same email for malware & false positive submission.

Source: https://www.lionic.com/reportfp/