This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Scam detected URL with numbers

  • 2 replies
  • 1 has this problem
  • 1 view
  • Last reply by ArnorBld

ArnorBld
ArnorBld
more options

Hi all,

From time to time I send emails to my customers. When I received the last email I sent (using MailChimp) it was marked as scam in TB. The only thing in this email that may be different from the emails I have sent before is that a URL was used that had a number in it (as in ... downloadfile.php?FileID=1234) I see that TB may mark an email as scam if number are used in the address (https://support.mozilla.org/en-US/kb/thunderbirds-scam-detection - "Links with numerical server names (http://127.0.0.1/)."), but IMO that should only apply if an IP address is used instead of a domain name. I'm using TB 38.3.0. I'm pretty sure I have used URLs like this before, but those emails have never triggered the scam warning in TB, so perhaps something has changed in TB?

Best regards,

Hi all, From time to time I send emails to my customers. When I received the last email I sent (using MailChimp) it was marked as scam in TB. The only thing in this email that may be different from the emails I have sent before is that a URL was used that had a number in it (as in ... downloadfile.php?FileID=1234) I see that TB may mark an email as scam if number are used in the address (https://support.mozilla.org/en-US/kb/thunderbirds-scam-detection - "Links with numerical server names (http://127.0.0.1/)."), but IMO that should only apply if an IP address is used instead of a domain name. I'm using TB 38.3.0. I'm pretty sure I have used URLs like this before, but those emails have never triggered the scam warning in TB, so perhaps something has changed in TB? Best regards,

All Replies (2)

Matt
Matt
  • Moderator
  • Top 10 Contributor
more options

I would be more inclined to think it was something like a web beacon in the mail to provider your feedback on who opened the mail that the URL you mention. Part of my assumption is I get a lot of mail from Ebay and all of it contains item number links in the mail.

You can send me the mail to unicorn dot consulting at gmail dot com and I will have a look and see if I can figure it out if you like.

ArnorBld
ArnorBld Question owner
more options

Hi Matt,

Thanks for responding. That could be it, but I haven't changed the settings for the MailChimp emails for a very long time. I saved this email and an older one from about a month ago to .eml and compared them using BeyondCompare and apart from the email itself it looks pretty much the same - of course there are ton of all sorts of IDs that are different, but I don't see anything in the actual "envelop" they generate around the email that has changed.

I rarely get emails marked as scam so this got my attention! I send it to 3 email addresses that I end up receiving and they were all marked as scam. I will zip up the two eml files and send them to you in a minute. Really appreciate the offer:)

Best regards, Arnor