Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Message filter to catch dangerous links

  • 4 replies
  • 1 has this problem
  • 19 views
  • Last reply by Rahzan

more options

I have received a "phish"ing message spoofed from one my own (forwarding) email addresses. It asks to click on a link at "Sendgrid.net", which is surely a scam. I created a message filter to catch the text "Sendgrid.net" in the BODY and send it to spam folder but it does not work. I have to conclude that the link is not in the BODY of the message.

Is it possible to make this filter? (The message source is attached)

I have received a "phish"ing message spoofed from one my own (forwarding) email addresses. It asks to click on a link at "Sendgrid.net", which is surely a scam. I created a message filter to catch the text "Sendgrid.net" in the BODY and send it to spam folder but it does not work. I have to conclude that the link is not in the BODY of the message. Is it possible to make this filter? (The message source is attached)
Attached screenshots

Chosen solution

Click Customize in the filter window (see picture) and add Received as a custom header, and filter on sendgrid. You can do the same with Classic Search (Ctrl+Shift+F) to test a filter rule.

Read this answer in context 👍 0

All Replies (4)

more options

Chosen Solution

Click Customize in the filter window (see picture) and add Received as a custom header, and filter on sendgrid. You can do the same with Classic Search (Ctrl+Shift+F) to test a filter rule.

more options

Thank you very much. It'd be so much more of value if I knew how this trick works. When I added a "Custom header" it seems the name entered is arbitrary, but is there a meaning to "Received" built-in? if yes is there a list of special header names?

more options

A custom header can be any header that is shown in the message source (Ctrl+U).

https://mediatemple.net/community/products/dv/204643950/understanding-an-email-header

more options

Thanks! That occurred to me after I sent the message, as it was the only possibility. It's very useful.