Re: Phishing email or no?

2018-10-14 Thread Rupert Gallagher
I met the administrator of a national airway company whose IP addresses (used to send airplane tickets) were blacklisted. He had serious problems recovering the reputation of those IPs. Failing that, he jumped into O365, but they are still having problems. I am not surprised. On Sun, Oct 14, 20

Re: Phishing email or no?

2018-10-13 Thread Daniele Duca
On 13/10/2018 19:51, Rupert Gallagher wrote: "The message was marked as spam by the content filter." Nice... so they know they are sending spam! Who doesn't :) I mean, for a setup big enough like theirs, having abused accounts or outright spammers is somewhat endemic. What I think they are

Re: Phishing email or no?

2018-10-13 Thread RW
On Sat, 13 Oct 2018 11:40:21 +0200 Daniele Duca wrote: > On 12/10/2018 23:12, Pedro David Marco wrote: > > > > > > > >On Friday, October 12, 2018, 10:48:21 PM GMT+2, Rupert Gallagher > > wrote: > > > > >I love outlook.com ... > > > > i have seen recently an Office365 Phishing campaign c

Re: Phishing email or no?

2018-10-13 Thread Rupert Gallagher
"The message was marked as spam by the content filter." Nice... so they know they are sending spam! Sent from ProtonMail Mobile On Sat, Oct 13, 2018 at 11:40, Daniele Duca wrote: > On 12/10/2018 23:12, Pedro David Marco wrote: > >>>On Friday, October 12, 2018, 10:48:21 PM GMT+2, Rupert Gallagh

Re: Phishing email or no?

2018-10-13 Thread Alex
Hi, > >>> I'm curious what people think of this: > >>> > >>> https://pastebin.com/1XjwaCY1 > >>> > >>> It's unsolicited, so that makes it spam to me, but is it dangerous? > >>> yesinsights.com appears to be a legitimate company, but the sender, > >>> e...@hrteamerus.com, is a registered domain but

Re: Phishing email or no?

2018-10-13 Thread Daniele Duca
On 12/10/2018 23:12, Pedro David Marco wrote: >On Friday, October 12, 2018, 10:48:21 PM GMT+2, Rupert Gallagher wrote: >I love outlook.com ... i have seen recently an Office365 Phishing campaign coming from Office365 severs...  as good as it gets... It may be already known, but O365 do

Re: Phishing email or no?

2018-10-12 Thread David Jones
On 10/12/18 4:12 PM, Pedro David Marco wrote: > > > >On Friday, October 12, 2018, 10:48:21 PM GMT+2, Rupert Gallagher > wrote: > > >I love outlook.com ... > > i have seen recently an Office365 Phishing campaign coming from > Office365 severs...  as good as it gets... > > - > PedroD W

Re: Phishing email or no?

2018-10-12 Thread Pedro David Marco
>On Friday, October 12, 2018, 10:48:21 PM GMT+2, Rupert Gallagher wrote: >I love outlook.com ... i have seen recently an Office365 Phishing campaign coming from Office365 severs...  as good as it gets... -PedroD

Re: Phishing email or no?

2018-10-12 Thread Rupert Gallagher
I love outlook.com ... Sent from ProtonMail Mobile On Thu, Oct 11, 2018 at 22:30, Alex wrote: > Hi, > > I'm curious what people think of this: > > https://pastebin.com/1XjwaCY1 > > It's unsolicited, so that makes it spam to me, but is it dangerous? > yesinsights.com appears to be a legitimate c

Re: Phishing email or no?

2018-10-12 Thread David Jones
On 10/11/18 7:00 PM, Alex wrote: > Hi, > > On Thu, Oct 11, 2018 at 5:15 PM David Jones wrote: >> >> On 10/11/18 3:30 PM, Alex wrote: >>> Hi, >>> >>> I'm curious what people think of this: >>> >>> https://pastebin.com/1XjwaCY1 >>> >>> It's unsolicited, so that makes it spam to me, but is it danger

Re: Phishing email or no?

2018-10-12 Thread Pedro David Marco
In my opinion, any company dedicated so send out emails should put maximun attention to each and every minimun detail All the defects some of you are pointing out look like too "basic"  to not pay attention to them! PedroD

Re: Phishing email or no?

2018-10-11 Thread Martin Gregorie
On Thu, 2018-10-11 at 20:41 -0400, Alex wrote: > Is it spam because of your own rules, or something I'm missing? Could > it be failing DKIM because of my santizing? > Spotted in one - its was spam because a local rule triggered on your munging of some body URIs to contain 'example.com'. This doma

Re: Phishing email or no?

2018-10-11 Thread Alex
Hi, > > I'm curious what people think of this: > > > > https://pastebin.com/1XjwaCY1 > > > My SA setup thinks its spam. > > I notice its DKIM is invalid and that the envelope from doesn't match > the message-ID, which makes me suspicious. Doesn't a $100 draw look a > little bit too big for a singl

Re: Phishing email or no?

2018-10-11 Thread Alex
Hi, On Thu, Oct 11, 2018 at 5:15 PM David Jones wrote: > > On 10/11/18 3:30 PM, Alex wrote: > > Hi, > > > > I'm curious what people think of this: > > > > https://pastebin.com/1XjwaCY1 > > > > It's unsolicited, so that makes it spam to me, but is it dangerous? > > yesinsights.com appears to be a

Re: Phishing email or no?

2018-10-11 Thread Martin Gregorie
On Thu, 2018-10-11 at 16:30 -0400, Alex wrote: > Hi, > > I'm curious what people think of this: > > https://pastebin.com/1XjwaCY1 > My SA setup thinks its spam. I notice its DKIM is invalid and that the envelope from doesn't match the message-ID, which makes me suspicious. Doesn't a $100 draw

Re: Phishing email or no?

2018-10-11 Thread David Jones
On 10/11/18 3:30 PM, Alex wrote: > Hi, > > I'm curious what people think of this: > > https://pastebin.com/1XjwaCY1 > > It's unsolicited, so that makes it spam to me, but is it dangerous? > yesinsights.com appears to be a legitimate company, but the sender, > e...@hrteamerus.com, is a registered

Phishing email or no?

2018-10-11 Thread Alex
Hi, I'm curious what people think of this: https://pastebin.com/1XjwaCY1 It's unsolicited, so that makes it spam to me, but is it dangerous? yesinsights.com appears to be a legitimate company, but the sender, e...@hrteamerus.com, is a registered domain but has no DNS record. Is it just a lame a