About Me

I ramble about a number of things - but travel experiences, movies and music feature prominently. See my label cloud for a better idea. All comnments and opinions on this blog are my own, and do not in any way reflect the opinions/position of my employer (past/current/future).

02 May 2013

Amazing Phishing Email

I got this email, this morning - perfectly formed and almost indistinguisable (click for a larger size). Pity, I am not a customer ...


The headers, and specifically Gmail's processing makes interesting reading (highlight my own). I wonder why it is a classified as a "Softfail" when the rule is clearly violated ...
Return-Path: 
Received: from dc1.DFMCASTROL.com ([58.48.109.18])
      by mx.google.com with ESMTP id iv6si3639532pac.241.2013.05.01.15.45.30
      for ;
      Wed, 01 May 2013 15:45:36 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning  
ibsupport@standardbank.co.za does not designate 58.48.109.18 as permitted 
sender) 
client-ip=58.48.109.18; Authentication-Results: mx.google.com; spf=softfail 
(google.com: domain of transitioning 
ibsupport@standardbank.co.za does not designate 58.48.109.18 as permitted 
sender) smtp.mail=ibsupport@standardbank.co.za
Received: from User ([74.93.82.193]) by dc1.DFMCASTROL.com with Microsoft 
SMTPSVC(6.0.3790.4675);
  Thu, 2 May 2013 06:28:03 +0800
From: "Standard Bank"

No comments: