3 ms·

There is something strange about those headers. Are they all from the same email? There are two Received: with by mx.google.com, and they are nearly two days a

There is something strange about those headers. Are they all from the same email? There are two Received: with by mx.google.com, and they are nearly two days apart. And there are two Received-SPF: headers. Other than that, my guess is that the spammer has BCC'd you and put your email address in the from: header (oddly lowercase here). Gmail will put messages from you in the Sent folder (label) even when they are sent from outside Gmail.

spacehunt 9y ago
The extra ones are probably made up by the spammer trying to trick Google's anti spam machinery. When I was an anti-spam engineer 10 years ago, we saw this sort of tricks all the time. Basically the only headers you can trust are the ones inserted by your own infrastructure. DKIM does mitigate this somewhat, but of course has its own problems.
jlgaddis 9y ago
The last Received: and Received-SPF: headers are forged. It's pretty common for spammers to do that, apparently in an attempt to "trick" either spam filtering software or a person looking at the headers.
logicallee 9y ago
>Gmail will put messages from you in the Sent folder (label) even when they are sent from outside Gmail. On the principle of least surprise, this would seem to be incomplete behavior. I bet every single person reading this was surprised. It's not a bad place to put such mail, so I suggest that on its web and mobile interface, Gmail simply put some kind of badge for sent mail sent from outside Gmail or your devices. Example: https://imgur.com/a/KEMf1HM https://imgur.com/a/KEMf1HM (Notice the ⓘ [circled i] in the first line.) Source: I mocked above up from Google image search for "gmail sent folder" and an open clipart "information icon". If you click on that i or hover it should mention that some of these messages were sent from outside Gmail or from your authorized devices but have been put in your Sent folder because your email address is in the from: field.
- angry_octet 9y ago
  People notoriously won't know what a new badge means, and this being an uncommon scenario, no one will, panic ensues. It might be better if such email was automatically marked as spam until the user marks it as good. If they keep doing that, then that send path should gain elevated trust. (I mean, they are using some ML system here right?) I'm imagining an anti-spam-campaign supervisor system that also tracks spam with some sort of soft hash (or ML), running across many user's email.
- Izkata 9y ago
  I can see this getting easily confused with emoji subject lines: http://www.emailmarketingtipps.de/2015/05/11/animated-emojis-in-gmail-subject-lines-cheat-sheet/ http://www.emailmarketingtipps.de/2015/05/11/animated-emojis...

spacehunt 9y ago

The extra ones are probably made up by the spammer trying to trick Google's anti spam machinery. When I was an anti-spam engineer 10 years ago, we saw this sort of tricks all the time. Basically the only headers you can trust are the ones inserted by your own infrastructure. DKIM does mitigate this somewhat, but of course has its own problems.

jlgaddis 9y ago

The last Received: and Received-SPF: headers are forged. It's pretty common for spammers to do that, apparently in an attempt to "trick" either spam filtering software or a person looking at the headers.

logicallee 9y ago

>Gmail will put messages from you in the Sent folder (label) even when they are sent from outside Gmail. On the principle of least surprise, this would seem to be incomplete behavior. I bet every single person reading this was surprised. It's not a bad place to put such mail, so I suggest that on its web and mobile interface, Gmail simply put some kind of badge for sent mail sent from outside Gmail or your devices. Example: https://imgur.com/a/KEMf1HM https://imgur.com/a/KEMf1HM (Notice the ⓘ [circled i] in the first line.) Source: I mocked above up from Google image search for "gmail sent folder" and an open clipart "information icon". If you click on that i or hover it should mention that some of these messages were sent from outside Gmail or from your authorized devices but have been put in your Sent folder because your email address is in the from: field.

angry_octet 9y ago
People notoriously won't know what a new badge means, and this being an uncommon scenario, no one will, panic ensues. It might be better if such email was automatically marked as spam until the user marks it as good. If they keep doing that, then that send path should gain elevated trust. (I mean, they are using some ML system here right?) I'm imagining an anti-spam-campaign supervisor system that also tracks spam with some sort of soft hash (or ML), running across many user's email.
Izkata 9y ago
I can see this getting easily confused with emoji subject lines: http://www.emailmarketingtipps.de/2015/05/11/animated-emojis-in-gmail-subject-lines-cheat-sheet/ http://www.emailmarketingtipps.de/2015/05/11/animated-emojis...