[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Icedove says that everything sent from @google.com email address is scam.



On 07/24/2012 12:32 PM, Camaleón wrote:
On Tue, 24 Jul 2012 11:05:07 -0400, Wayne Topa wrote:

On 07/24/2012 10:00 AM, Camaleón wrote:

(...)

OTOH, I find TB's ratio of false possitives for "scam" to be very low.

Greetings,


I too received a message marked as "scam" by icedove recently but it was
not from a googlemail addr.

I believe it might be correct as I don't have an account in Europe.

(...)

----------------------------

(...)

Tak for din forståelse på denne måde. For at bekræfte din online-konto:.


https://www.pbs.dk/eu/servver/done/nets-Acc990755

----------------------------

While the above URI seems legitime, the content of the message is a bit
fuzzy as it requests for confirming an online account with generic
wording and no further data/information.

Anyway, if the message is not in plain text, does the showed URL match
with the<a href=""></a>  html code? That's what the scam filter would
look at.

Greetings,

 As far as I can see. it doen not match.

----------------------------------------

From - Sun Jul 22 14:11:55 2012
X-Account-Key: account2
X-UIDL: GmailId138af2dcc1e131f4
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Delivered-To: linuxtwo@gmail.com
Received: by 10.112.85.161 with SMTP id i1csp109687lbz;
        Sun, 22 Jul 2012 07:53:31 -0700 (PDT)
Received: by 10.50.17.226 with SMTP id r2mr8506293igd.47.1342968810977;
        Sun, 22 Jul 2012 07:53:30 -0700 (PDT)
Return-Path: <pakchoob@host5.persianorbit.com>
Received: from host5.persianorbit.com (host5.persianorbit.com. [67.227.237.7]) by mx.google.com with ESMTPS id bl3si13756695icb.33.2012.07.22.07.53.30
        (version=TLSv1/SSLv3 cipher=OTHER);
        Sun, 22 Jul 2012 07:53:30 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of pakchoob@host5.persianorbit.com designates 67.227.237.7 as permitted sender) client-ip=67.227.237.7; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of pakchoob@host5.persianorbit.com designates 67.227.237.7 as permitted sender) smtp.mail=pakchoob@host5.persianorbit.com
Received: from pakchoob by host5.persianorbit.com with local (Exim 4.77)
	(envelope-from <pakchoob@host5.persianorbit.com>)
	id 1SsxXG-0000bs-By
	for linuxtwo@gmail.com; Sun, 22 Jul 2012 19:23:30 +0430
To: linuxtwo@gmail.com
Subject: I  Member Bank Nets  I  Beskyt dit kreditkort...
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From: I  Nets  I <memeber@nets.bank.eu>
Message-Id: <E1SsxXG-0000bs-By@host5.persianorbit.com>
Date: Sun, 22 Jul 2012 19:23:30 +0430
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - host5.persianorbit.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [559 556] / [47 12]
X-AntiAbuse: Sender Address Domain - host5.persianorbit.com


<img src="http://www.winningbay.fr/campaigns/fr/C16/images/nets_logo.png";
---------------------------------------


Reply to: