MailScanner has detected a possible fraud attempt from "eur03.safelinks.protection.outlook.com" claiming to be [whatever]

Alex Neuman alex at vidadigital.com.pa
Wed Aug 11 11:56:34 UTC 2021


I think you mean "neutralized by O365" - Outlook is just the client and
doesn't neutralize links by itself. Some antivirus programs also do this by
redirecting through their individual checkers.

You could use the following setting:
Phishing Safe Sites File = %etc-dir%/phishing.safe.sites.conf
And use a list of sites to be exempted from this, such as "*.
safelinks.protection.outlook.com".
I've never tested this though.

[image: logo]
*Alex Neuman van der Hans* *Producer/Host**, Vida Digital*
+1 (440) 253-9789 <+1+(440)+253-9789> | +507 6781-9505 <+507+6781-9505> |
Panama |alex at vidadigital.com.pa | vidadigital.com.pa/
<https://mailtrack.io/trace/link/7f4d9f0b57f5096949aa8122756a2713657cc366?url=http%3A%2F%2Fvidadigital.com.pa%2F&userId=2636895&signature=a1a084ce7b4b8c86>

Skype:alexneuman
<https://mailtrack.io/trace/link/8dbe4c846cec9046bbedf452b393e6e6005b60d9?url=https%3A%2F%2Fwebapp.wisestamp.com%2Fsig_iframe%3Forigin%3Dmac-mail%26signature_id%3D5234486814965760%26t%3D0.5662234535507977%23&userId=2636895&signature=53e96139a496d495>
 | wiseintro.co/alexneuman
<https://mailtrack.io/trace/link/6a618da68f0f5ad2ac4a2d1cf67986733cf36398?url=http%3A%2F%2Fwiseintro.co%2Falexneuman&userId=2636895&signature=392d8d8846d6d2fb>

<https://mailtrack.io/trace/link/d9359e718769aa3c21171ff25cdc6ea746e2229f?url=http%3A%2F%2Ffacebook.com%2Fvidadigital&userId=2636895&signature=52a65430f47e586e>
<https://mailtrack.io/trace/link/abe49e3dbcb32aec6b18999e49e0f59011b0fe1f?url=http%3A%2F%2Fpa.linkedin.com%2Fin%2Falexneuman&userId=2636895&signature=d01341ca0fdfda2d>
<https://mailtrack.io/trace/link/07046e3fe7db1e46faa02e5ffba0ea7e7ca25bb6?url=http%3A%2F%2Ftwitter.com%2Falexneuman&userId=2636895&signature=347df93aac1d044a>
<https://mailtrack.io/trace/link/007ef14609208d00ac58bf16365faf71cf19dcf0?url=http%3A%2F%2Fpinterest.com%2Fvidadigital&userId=2636895&signature=0c7fdee1b8932fd0>
<https://mailtrack.io/trace/link/374b7e38b3a1eac628bac84ad66733741b92bc4f?url=http%3A%2F%2Fyoutube.com%2Fvidadigital%3Fsub_confirmation%3D1&userId=2636895&signature=51c2389cca99e3e9>
<https://mailtrack.io/trace/link/5c4af9cab0ae0839fcae06daacba7f24da103960?url=http%3A%2F%2Finstagram.com%2Fvidadigital&userId=2636895&signature=443a9dd5cb2d7780>
<https://mailtrack.io/trace/link/de93068d1eddfa69ed74314250bfc5d634141044?url=http%3A%2F%2Famazon.com%2F%3Ftag%3Dvidadigi-20&userId=2636895&signature=bab75d7a29b3b5fb>
<https://mailtrack.io/trace/link/5d4b96dd2303adb791c08bb7c89e5e05d725e772?url=http%3A%2F%2Fskype%3Aalexneuman%2F%3Fcall%26topic%3DSignature&userId=2636895&signature=dddb58b9a7a5e220>
<https://mailtrack.io/trace/link/b01cf64225693f03260b47a602d3921e3f3587d4?url=http%3A%2F%2Fapi.whatsapp.com%2Fsend%3Fphone%3D50767819505&userId=2636895&signature=c2e4ad73aa19753e>
<https://mailtrack.io/trace/link/3da858618bd7045f249d5d8f023e025e6ce73849?url=http%3A%2F%2Fwiseintro.co%2Falexneuman&userId=2636895&signature=8a128c4513b4e613>

[image: image.gif]

On Wed, Aug 11, 2021 at 2:31 AM <mailscanner at barendse.to> wrote:

> Is there any way to 'exempt' links that have been neutralized by outlook
> from getting the "detected a possible fraud attempt" ?  More and more
> emails contain this and one warning is added on every link every time the
> mail is replied to so they just stack up in the email.
>
> Thanks!
>
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> <https://mailtrack.io/trace/link/7ca8819a00ae3f429a3ab572e87a56d94e249f4b?url=http%3A%2F%2Flists.mailscanner.info%2Fmailman%2Flistinfo%2Fmailscanner&userId=2636895&signature=d16de527d3f99390>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20210811/f07d314c/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.gif
Type: image/gif
Size: 42 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20210811/f07d314c/attachment.gif>


More information about the MailScanner mailing list