We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Rechercher dans l’assistance

Évitez les escroqueries à l’assistance. Nous ne vous demanderons jamais d’appeler ou d’envoyer un SMS à un numéro de téléphone ou de partager des informations personnelles. Veuillez signaler toute activité suspecte en utilisant l’option « Signaler un abus ».

En savoir plus

Ce sujet de discussion a été archivé. Veuillez poser une nouvelle question si vous avez besoin d’aide.

Scam detected URL with numbers

  • 2 réponses
  • 1 a ce problème
  • 1 vue
  • Dernière réponse par ArnorBld

ArnorBld
ArnorBld
more options

Hi all,

From time to time I send emails to my customers. When I received the last email I sent (using MailChimp) it was marked as scam in TB. The only thing in this email that may be different from the emails I have sent before is that a URL was used that had a number in it (as in ... downloadfile.php?FileID=1234) I see that TB may mark an email as scam if number are used in the address (https://support.mozilla.org/en-US/kb/thunderbirds-scam-detection - "Links with numerical server names (http://127.0.0.1/)."), but IMO that should only apply if an IP address is used instead of a domain name. I'm using TB 38.3.0. I'm pretty sure I have used URLs like this before, but those emails have never triggered the scam warning in TB, so perhaps something has changed in TB?

Best regards,

Hi all, From time to time I send emails to my customers. When I received the last email I sent (using MailChimp) it was marked as scam in TB. The only thing in this email that may be different from the emails I have sent before is that a URL was used that had a number in it (as in ... downloadfile.php?FileID=1234) I see that TB may mark an email as scam if number are used in the address (https://support.mozilla.org/en-US/kb/thunderbirds-scam-detection - "Links with numerical server names (http://127.0.0.1/)."), but IMO that should only apply if an IP address is used instead of a domain name. I'm using TB 38.3.0. I'm pretty sure I have used URLs like this before, but those emails have never triggered the scam warning in TB, so perhaps something has changed in TB? Best regards,

Toutes les réponses (2)

Matt
Matt
  • Moderator
  • Top 10 Contributor
more options

I would be more inclined to think it was something like a web beacon in the mail to provider your feedback on who opened the mail that the URL you mention. Part of my assumption is I get a lot of mail from Ebay and all of it contains item number links in the mail.

You can send me the mail to unicorn dot consulting at gmail dot com and I will have a look and see if I can figure it out if you like.

ArnorBld
ArnorBld Auteur de la question
more options

Hi Matt,

Thanks for responding. That could be it, but I haven't changed the settings for the MailChimp emails for a very long time. I saved this email and an older one from about a month ago to .eml and compared them using BeyondCompare and apart from the email itself it looks pretty much the same - of course there are ton of all sorts of IDs that are different, but I don't see anything in the actual "envelop" they generate around the email that has changed.

I rarely get emails marked as scam so this got my attention! I send it to 3 email addresses that I end up receiving and they were all marked as scam. I will zip up the two eml files and send them to you in a minute. Really appreciate the offer:)

Best regards, Arnor