Yeah, we've had a few false positives recently with two (Google Forms default to using goo.gl with a non-pretty url, so folks use other redirectors like bit.ly to make it pretty), but those fp's were still pretty rare comparatively.
Brandon On Tue, Oct 16, 2018 at 6:16 PM Michael Wise via mailop <mailop@mailop.org> wrote: > > More than one redirector in a row is ... let's just say, Suspicious. > > Aloha, > Michael. > -- > Michael J Wise > Microsoft Corporation| Spam Analysis > "Your Spam Specimen Has Been Processed." > Got the Junk Mail Reporting Tool ? > > -----Original Message----- > From: mailop <mailop-boun...@mailop.org> On Behalf Of John Levine > Sent: Tuesday, October 16, 2018 5:58 PM > To: mailop@mailop.org > Cc: bl...@google.com > Subject: Re: [mailop] YahooMailProxy User Agent > > In article <CABa8R6stPGzcCApzPvx43RBXxgHPGx-ndLj2P1Nujso= > wvf...@mail.gmail.com> you write: > >It is pretty common these days for spam systems to sometimes visit > >links in the email message to help determine the spamminess or > >phishiness or just plain badness of messages. It's one of the reasons > >for the newer list-unsubscribe-post header in rfc 8058 (as mentioned in > the abstract). > > Quite right. Malicious links often go through a long chain of redirects > so you have to follow the chain and see where it ends up. > > For confirmations, be a mensch and put a pair of buttons on the > confirmation page, one for "yes, yes, send me an endless stream of valuable > offers from your Treasured Marketing Partners", and another "uh oh, that > wasn't me, don't let the bozo who did this try again". > > I think I may have mentioned a few times how many people with names > similar to mine think that my gmail account is their gmail account. > Fake subscribes happen all the time, and they're often just dumb, not > malicious. The dumb ones are the most persistent. > > R's, > John > > _______________________________________________ > mailop mailing list > mailop@mailop.org > > https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fchilli.nosignal.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fmailop&data=02%7C01%7Cmichael.wise%40microsoft.com%7Cdb78fb519a3144cde7a508d633ccaed6%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636753351572266419&sdata=%2Bk4N0tAIyrdcA2%2B0EVmVQM%2B9jam8qJh6kPjGEkxc4F8%3D&reserved=0 > _______________________________________________ > mailop mailing list > mailop@mailop.org > https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop >
_______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
