cancel
Showing results for 
Search instead for 
Did you mean: 

Email tagged as [PHISHING]

Moderator
Moderator
Posts: 26,968
Thanks: 1,760
Fixes: 135
Registered: 14-04-2007

Email tagged as [PHISHING]

Does anyone else get emails like these:
Quote
Envelope-to: ezozo@my_domain.co.uk
Delivery-date: Tue, 05 Feb 2008 11:09:27 +0000
Received: from exprod5mx227.postini.com ([64.18.0.86] helo=psmtp.com)
    by pih-sunmxcore16.plus.net with smtp (PlusNet MXCore v2.00) id 1JMLg6-0006sG-7i
    for ezozo@my_domain.co.uk; Tue, 05 Feb 2008 11:09:27 +0000
Received: from source ([89.161.72.177]) by exprod5mx227.postini.com ([64.18.4.10]) with SMTP;
    Tue, 05 Feb 2008 05:09:23 CST
Message-ID: <002f01c867e7$93770ebe$0201a8c0@OLA>
From: "Natwest Bank OnLine Banking '08" <customer-support-op_69fxc@natwest.com>
To: <ezozo@my_domain.co.uk>
Subject: [-SPAM-] =?utf-8?Q?[PHISHING]:=20Important=20Internet=20Banking=20Email=20From=20Natwest=20Direct=20Banking?=
Date: Tue, 05 Feb 2008 12:09:28 +0200
MIME-Version: 1.0
Content-Type: multipart/related;
    type="multipart/alternative";
    boundary="----=_NextPart_000_002B_01C867EF.F5390AA0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-pstn-levels: (S: 0.00000/96.70578 CV:24.8183 R:95.9108 P:95.9108 M:97.0282 C:98.6951 )
X-pstn-settings: 1 (0.1500:0.1500) CV gt3 gt2 gt1 r p m c
X-pstn-addresses: from <customer-support-op_69fxc@natwest.com> [21/1]
X-pn-pstn: Spam 1
X-PN-VirusFiltered: by PlusNet MXCore (v4.00)

Specifically the [PHISHING] in the Subject line.
This header is off webmail so my email client gets nowhere near it to mark it.
Has anyone any idea where this subject tag comes from.
It's not a problem, I'm just very curious.

Customer and Forum Moderator.

3 REPLIES
Community Gaffer
Community Gaffer
Posts: 13,430
Thanks: 1,187
Fixes: 92
Registered: 04-04-2007

Re: Email tagged as [PHISHING]

Somebody reported one of these a while back. I had a look into it then and confirmed that it was nothing to do with Postini or our spam filtering. The odd thing is, why would a spammer sending a phishing email label it as such? Huh

Bob Pullen
Plusnet Product Team
If I've been helpful then please give thanks ⤵

pierre_pierre
Grafter
Posts: 19,757
Registered: 30-07-2007

Re: Email tagged as [PHISHING]

could it be that a remote zombie site has a different anti spam that labled it as spam before forwarding?
Moderator
Moderator
Posts: 26,968
Thanks: 1,760
Fixes: 135
Registered: 14-04-2007

Re: Email tagged as [PHISHING]

Quote from: Bob
Somebody reported one of these a while back.

That someone was me Bob Lips are sealed
As you say it would not make sense for the OS to tag their own spam in such a way....unless their ISP has done it Undecided
I was just wondering if someone in the community has had experience of these before and managed to locate the source of the tag.

Customer and Forum Moderator.