[Tickets #13066] Re: Link in email marked as bad but is not bad

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/13066
------------------------------------------------------------------------------
  Ticket             | 13066
  Updated By         | arjen+horde at de-korte.org
  Summary            | Link in email marked as bad but is not bad
  Queue              | IMP
  Version            | 6.1.7
  Type               | Bug
  State              | Unconfirmed
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


arjen+horde at de-korte.org (2014-03-21 08:26) wrote:

> i got an email with many links in it. message is attached, on the  
> right side there are many links.
> i don't understand why 'jetbrains.org' =>
> 'http://go.jetbrains.com/426QVD1140000Y100tse900' is marked bad  
> while 'jetbrains.com' =>  
> 'http://go.jetbrains.com/426QVD1140000Y000tse900' is not.
> the only difference here is one character. this seems to be a false positive

No, this is because you don't understand why links are marked as bad.  
'Bad' doesn't mean the target doesn't exist. Links are marked as bad,  
when they direct you some other place than what is displayed on screen.

In this case, what is shown on the screen is a link in the  
'jetbrains.org' domain, while it directs you to the 'jetbrains.com'  
domain. This is considered 'bad' because it is frequently used by  
phishing mails, where the displayed value suggests it takes you to  
your bank or government site, but in reality when you click the link  
it takes you a scam site.