cancel
Showing results for 
Search instead for 
Did you mean: 

Email tagged as [PHISHING]

Strat
Community Veteran
Posts: 31,320
Thanks: 1,609
Fixes: 565
Registered: ‎14-04-2007

Email tagged as [PHISHING]

Does anyone else get emails like these:
Quote
Envelope-to: ezozo@my_domain.co.uk
Delivery-date: Tue, 05 Feb 2008 11:09:27 +0000
Received: from exprod5mx227.postini.com ([64.18.0.86] helo=psmtp.com)
    by pih-sunmxcore16.plus.net with smtp (PlusNet MXCore v2.00) id 1JMLg6-0006sG-7i
    for ezozo@my_domain.co.uk; Tue, 05 Feb 2008 11:09:27 +0000
Received: from source ([89.161.72.177]) by exprod5mx227.postini.com ([64.18.4.10]) with SMTP;
    Tue, 05 Feb 2008 05:09:23 CST
Message-ID: <002f01c867e7$93770ebe$0201a8c0@OLA>
From: "Natwest Bank OnLine Banking '08" <customer-support-op_69fxc@natwest.com>
To: <ezozo@my_domain.co.uk>
Subject: [-SPAM-] =?utf-8?Q?[PHISHING]:=20Important=20Internet=20Banking=20Email=20From=20Natwest=20Direct=20Banking?=
Date: Tue, 05 Feb 2008 12:09:28 +0200
MIME-Version: 1.0
Content-Type: multipart/related;
    type="multipart/alternative";
    boundary="----=_NextPart_000_002B_01C867EF.F5390AA0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-pstn-levels: (S: 0.00000/96.70578 CV:24.8183 R:95.9108 P:95.9108 M:97.0282 C:98.6951 )
X-pstn-settings: 1 (0.1500:0.1500) CV gt3 gt2 gt1 r p m c
X-pstn-addresses: from <customer-support-op_69fxc@natwest.com> [21/1]
X-pn-pstn: Spam 1
X-PN-VirusFiltered: by PlusNet MXCore (v4.00)

Specifically the [PHISHING] in the Subject line.
This header is off webmail so my email client gets nowhere near it to mark it.
Has anyone any idea where this subject tag comes from.
It's not a problem, I'm just very curious.
Windows 10 Firefox 109.0 (64-bit)
To argue with someone who has renounced the use of reason is like administering medicine to the dead - Thomas Paine
3 REPLIES 3
bobpullen
Community Gaffer
Community Gaffer
Posts: 16,869
Thanks: 4,950
Fixes: 315
Registered: ‎04-04-2007

Re: Email tagged as [PHISHING]

Somebody reported one of these a while back. I had a look into it then and confirmed that it was nothing to do with Postini or our spam filtering. The odd thing is, why would a spammer sending a phishing email label it as such? Huh

Bob Pullen
Plusnet Product Team
If I've been helpful then please give thanks ⤵

pierre_pierre
Grafter
Posts: 19,757
Thanks: 3
Registered: ‎30-07-2007

Re: Email tagged as [PHISHING]

could it be that a remote zombie site has a different anti spam that labled it as spam before forwarding?
Strat
Community Veteran
Posts: 31,320
Thanks: 1,609
Fixes: 565
Registered: ‎14-04-2007

Re: Email tagged as [PHISHING]

Quote from: Bob
Somebody reported one of these a while back.

That someone was me Bob Lips_are_sealed
As you say it would not make sense for the OS to tag their own spam in such a way....unless their ISP has done it Undecided
I was just wondering if someone in the community has had experience of these before and managed to locate the source of the tag.
Windows 10 Firefox 109.0 (64-bit)
To argue with someone who has renounced the use of reason is like administering medicine to the dead - Thomas Paine