Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Rohkem teavet

Message filter to catch dangerous links

  • 4 vastust
  • 1 on selline probleem
  • 19 views
  • Viimati vastas Rahzan

more options

I have received a "phish"ing message spoofed from one my own (forwarding) email addresses. It asks to click on a link at "Sendgrid.net", which is surely a scam. I created a message filter to catch the text "Sendgrid.net" in the BODY and send it to spam folder but it does not work. I have to conclude that the link is not in the BODY of the message.

Is it possible to make this filter? (The message source is attached)

I have received a "phish"ing message spoofed from one my own (forwarding) email addresses. It asks to click on a link at "Sendgrid.net", which is surely a scam. I created a message filter to catch the text "Sendgrid.net" in the BODY and send it to spam folder but it does not work. I have to conclude that the link is not in the BODY of the message. Is it possible to make this filter? (The message source is attached)
Attached screenshots

Valitud lahendus

Click Customize in the filter window (see picture) and add Received as a custom header, and filter on sendgrid. You can do the same with Classic Search (Ctrl+Shift+F) to test a filter rule.

Loe vastust kontekstis 👍 0

All Replies (4)

more options

Valitud lahendus

Click Customize in the filter window (see picture) and add Received as a custom header, and filter on sendgrid. You can do the same with Classic Search (Ctrl+Shift+F) to test a filter rule.

more options

Thank you very much. It'd be so much more of value if I knew how this trick works. When I added a "Custom header" it seems the name entered is arbitrary, but is there a meaning to "Received" built-in? if yes is there a list of special header names?

more options

A custom header can be any header that is shown in the message source (Ctrl+U).

https://mediatemple.net/community/products/dv/204643950/understanding-an-email-header

more options

Thanks! That occurred to me after I sent the message, as it was the only possibility. It's very useful.