Question about phishing and mailscanner

[ovizii]

I have "Use stricter phishing net" disabled and yet Mailscanner keeps complaining about this supposed phishing attempt:

Code: Select all

MailScanner has detected a possible fraud attempt from "www.telekom.de" claiming to be www.telekom.com/geschäftskunden 

does that make sense? I thought this was exactly the case which should be prevented by "Use stricter phishing net"

[shawniverson]

Isn't that caused by the Detect Phishing Fraud = yes in MailScanner.conf?

[ovizii]

Not sure, I thought not but I might be wrong. I understood that whatever.tld1 would not trigger when the link actually is wahtver.tld2

Here are the respective definitions if someone wants to weigh in:
https://www.mailscanner.info/MailScanne ... .html#Find Phishing Fraud
https://www.mailscanner.info/MailScanne ... x.html#Use Stricter Phishing Net