Avatar for Username

Sykje yn Support

Mij stipescams. Wy sille jo nea freegje in telefoannûmer te beljen, der in sms nei ta te stjoeren of persoanlike gegevens te dielen. Meld fertochte aktiviteit mei de opsje ‘Misbrûk melde’.

Mear ynfo

Dizze konversaasje is argivearre. Stel in nije fraach as jo help nedich hawwe.

Scam detected URL with numbers

  • 2 antwurd
  • 1 hat dit probleem
  • 1 werjefte
  • Lêste antwurd fan ArnorBld

ArnorBld
ArnorBld
more options

Hi all,

From time to time I send emails to my customers. When I received the last email I sent (using MailChimp) it was marked as scam in TB. The only thing in this email that may be different from the emails I have sent before is that a URL was used that had a number in it (as in ... downloadfile.php?FileID=1234) I see that TB may mark an email as scam if number are used in the address (https://support.mozilla.org/en-US/kb/thunderbirds-scam-detection - "Links with numerical server names (http://127.0.0.1/)."), but IMO that should only apply if an IP address is used instead of a domain name. I'm using TB 38.3.0. I'm pretty sure I have used URLs like this before, but those emails have never triggered the scam warning in TB, so perhaps something has changed in TB?

Best regards,

Hi all, From time to time I send emails to my customers. When I received the last email I sent (using MailChimp) it was marked as scam in TB. The only thing in this email that may be different from the emails I have sent before is that a URL was used that had a number in it (as in ... downloadfile.php?FileID=1234) I see that TB may mark an email as scam if number are used in the address (https://support.mozilla.org/en-US/kb/thunderbirds-scam-detection - "Links with numerical server names (http://127.0.0.1/)."), but IMO that should only apply if an IP address is used instead of a domain name. I'm using TB 38.3.0. I'm pretty sure I have used URLs like this before, but those emails have never triggered the scam warning in TB, so perhaps something has changed in TB? Best regards,

Alle antwurden (2)

Matt
Matt
  • Moderator
  • Top 10 Contributor
more options

I would be more inclined to think it was something like a web beacon in the mail to provider your feedback on who opened the mail that the URL you mention. Part of my assumption is I get a lot of mail from Ebay and all of it contains item number links in the mail.

You can send me the mail to unicorn dot consulting at gmail dot com and I will have a look and see if I can figure it out if you like.

ArnorBld
ArnorBld Fraacheigener
more options

Hi Matt,

Thanks for responding. That could be it, but I haven't changed the settings for the MailChimp emails for a very long time. I saved this email and an older one from about a month ago to .eml and compared them using BeyondCompare and apart from the email itself it looks pretty much the same - of course there are ton of all sorts of IDs that are different, but I don't see anything in the actual "envelop" they generate around the email that has changed.

I rarely get emails marked as scam so this got my attention! I send it to 3 email addresses that I end up receiving and they were all marked as scam. I will zip up the two eml files and send them to you in a minute. Really appreciate the offer:)

Best regards, Arnor