phishkill: skip mailto stuff?

[Julian Field]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

It actually looks like they have got the link and the text totally the
wrong way round. The link target URL should contain the mailto, and not
the text displayed in the link.

So I don't see what I can do about this at all, sorry.

Julian Field wrote:

> But this appears to be
> <mailto:address> mailto:address
> I don't currently look for < or > characters, I guess I could add that.
> Then it would start mailto: and so be spotted.
>
> Jeff A. Earickson wrote:
>
>> Julian,
>>
>> Running 4.36.1 with version 1.126.2.172 of Message.pm.  I got a
>> complaint about this:
>>
>>> If you are having problems, please email myself
>>> (Ronald.Aho at jenzabar.net
>>> <<mailto:Ronald.Aho at jenzabar.net>MailScanner has detected a possible
>>> fraud
>>> attempt from "ronald.aho at jenzabar.net" claiming to
>>> be<mailto:Ronald.Aho at jenzabar.net> mailto:Ronald.Aho at jenzabar.net>)
>>> and Shirley
>>> High (shirley.high at jenzabar.net
>>> <<mailto:shirley.high at jenzabar.net>MailScanner
>>> has detected a possible fraud attempt from
>>> "shirley.high at jenzabar.net" claiming
>>> to be<mailto:shirley.high at jenzabar.net>
>>> mailto:shirley.high at jenzabar.net>)
>>> directly and we will forward it to the appropriate people. We will
>>> respond
>>
>>
>>
>> I thought that later versions of anti-phishing were supposed to ignore
>> mailto URLs?
>>
>> Jeff Earickson
>> Colby College
>>
>> ------------------------ MailScanner list ------------------------
>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>> 'leave mailscanner' in the body of the email.
>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>> Support MailScanner development - buy the book off the website!
>>
>
> --
> Julian Field
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
> Professional Support Services at www.MailScanner.biz
> MailScanner thanks transtec Computers for their support
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>

--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!