In three, recent, questionable e-mails i examined, they all had the same unsubscribe section at the bottom, looking exactly like this:
However, across the three e-mails, when you scrolled over the links to “unsubscribe” they were taking you to vastly different domains:
You would think that because they were all virtually the same e-mail, that they would take you to one [1] uniform domain to “unsubscribe”, but they weren’t. Highly questionable in my mind at least. For the above .coms, there was also lengthy code attached that i would imagine would either facilitate redirection OR deliver some sort of malware payload. I suspect the above Web addresses to possibly be “fronts”. Safe Web is also in the dark with respect to the three, indicating the gray question mark. Perhaps Norton should add those to their autoblock list to prevent navigation altogether. Although more investigation is required, i at least wanted to provide this heads-up for the Norton team. Maybe problems will be cut off at the pass thanks to this information. I will also have to document these sites with Safe Web.
Regards,
H.B.
P.S.- If i happen to report on a site that Safe Web indicates the gray question mark, will the system intuitively queue that site for testing?