Deceptive site ahead - phishing email

[maxxer]

Hi.
We received a (phishing?) email which triggers an error in Chrome, as if Zimbra was a malicious site.

deceptive site-1669213456665.png (173.51 KiB) Viewed 1956 times

I've posted the email source to Pastebin:
https://pastebin.com/z7n5ArdR

Is this something related to latest P28/P35? Currently running 9.0.0.ZEXTRAS.20220713.UBUNTU18.64 UBUNTU18_64 FOSS edition.

[7224jobe]

Hi, maybe some phishing email came out from that mail server? Here is Google report on that site https://transparencyreport.google.com/s ... l%2F&hl=en , updated on November 17.
I tried with some Zimbra 8-9 public servers and Google report says that they are ok.

[maxxer]

I think I didn't explain well enough my point: the Zimbra host is being marked as deceptive, because there's an email leading to a malicious site!

[ghen]

Probably because it refers an external image from a known phishing URL (and you have zimbraPrefDisplayExternalImages enabled).