Nervous about clicking

[bigjim]

I have gmail. I got a "email" ? started out showing from Google, then said," New sign-in from firefox on Windows (Hi, James your google acount xxxxxx@gmail..... then paper clip sign at 9:15am today MST.

 

for some reason this doesn't "feel" right. Any thoughts or comments. If I open it what is the risk? Thanks.

[chirakawa]

Somebody, somewhere is counting on you opening that attachment.

[Biker56]

A lot of times gmail will send a notice that there was a try to log on your email account, happen from a different address(device).

And that they blocked the sign in.

gmail does that a lot when I sign on using a campground wifi. Or use a VPN sign in.

And then you have to go to the web mail and OK the sign in. It is a gmail PITA.

 

But the notices never include a attachment(paper clip sign)

 

Any email with a attachment from someone you don't know. Should be deleted.

And if even from someone you know make sure it is from them.

[skp51443]

If you are unsure about the source of a message in Gmail you can click on the "More" down-arrow box at the top right and select view original. That will open the message in text mode and let you see just what you got instead of the Gmail prettified version you normally see. Reading what that page shows you isn't easy but getting a general idea of where the e-mail came from and what it contains isn't too hard. Look for the first "Received: from mail-lb0-x246.google.com" and the "Received-SPF: pass" that show it came from Gmail, the server in the received bit may change but should show google.com.

Delivered-To: xxx@gmail.com
Received: by 10.107.37.139 with SMTP id l133csp1090482iol;
        Wed, 25 May 2016 03:40:47 -0700 (PDT)
X-Received: by 10.25.29.138 with SMTP id d132mr767134lfd.142.1464172847090;
        Wed, 25 May 2016 03:40:47 -0700 (PDT)
Return-Path: <3LoFFVxcTAAcuvylws5-hjjv1u0hj0p2p05hjjv1u0z.nvvnsl.jvt@accountstatement.bounces.google.com>
Received: from mail-lb0-x246.google.com (mail-lb0-x246.google.com. [2a00:1450:4010:c04::246])
        by mx.google.com with ESMTPS id e34si5404755lfi.136.2016.05.25.03.40.46
        for <xxx@gmail.com>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Wed, 25 May 2016 03:40:47 -0700 (PDT)
Received-SPF: pass (google.com: domain of 3LoFFVxcTAAcuvylws5-hjjv1u0hj0p2p05hjjv1u0z.nvvnsl.jvt@accountstatement.bounces.google.com 
       designates 2a00:1450:4010:c04::246 as permitted sender) client-ip=2a00:1450:4010:c04::246;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@accounts.google.com;
       spf=pass (google.com: domain of 3LoFFVxcTAAcuvylws5-hjjv1u0hj0p2p05hjjv1u0z.nvvnsl.jvt@accountstatement.bounces.google.com 
       designates 2a00:1450:4010:c04::246 as permitted sender) 
       smtp.mailfrom=3LoFFVxcTAAcuvylws5-hjjv1u0hj0p2p05hjjv1u0z.nvvnsl.jvt@accountstatement.bounces.google.com;
       dmarc=pass (p=REJECT dis=NONE) header.from=accounts.google.com
Received: by mail-lb0-x246.google.com with SMTP id ne4so20939946lbc.1
        for <xxx@gmail.com>; Wed, 25 May 2016 03:40:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=accounts.google.com; s=20120806;
        h=mime-version:message-id:date:subject:from:to;
        bh=fLzjn0EYLrdJko/hSg8A1LrS2awKAunpxUxFwFs1ETM=;
        b=sC0ZtwMP3dNsUZafH18VyS/ByL+hMpAPerq/z0E2Btu9DKGdIRfzZNN9P69OB/FL0w
         0xBr+jJNe1jDRKeeBWZFp8uUp6ISEFRS0wisVDnvkMDhGfjk4GDiGHCl6Js82vnvIYAf
         e3XUVRgwl1N2rXHObNR7FSHV+lB93GFw7p9LwXR8OTKTsC9G4rYZxpEaIVHnxalMssLq
         1fB5pjQ5Mm2VhnE1YnvafcUIU3T1c1nl4vCFsw+3wVMUTUyzWq2lHKJn7I4H8RSZeupU
         O5DjGT2Ri/S1IKOjpM9Vf302zbaa3iYvSNNpqrTkpbRNKiA/GTrV2FkF1x/CJFeYuw2k
         sMBg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20130820;
        h=x-gm-message-state:mime-version:message-id:date:subject:from:to;
        bh=fLzjn0EYLrdJko/hSg8A1LrS2awKAunpxUxFwFs1ETM=;
        b=NnsEbjJLauRBnvqokT59s0EnCuvaSnVeDfkSCmwooJrP/cRx4GOITgt+j6FmZjtj6E
         w9LUsEG/eo+DWaAtWobb5uFaUW1U76leJC6lYL7KMRSlYsx6s4//OpqFXmO7NcJiNXMS
         LlAtGrQqh3wMZmimYgvosXvc8TY6fYaCYASdf9o/hoD1eIcUhs4wRUe9gS91eESQ8kbx
         4V4I5iB8BMlfZcArttKedEK4qSaKbPnoppmAu2Hva80Q1KEvhZ9pBpszFGlACnLxN94z
         cwDjhX8MQSl3NqxmSCluXsAuvhDUhHTRJjT50GaLblJmdC/Qw8sQghDXinwofMWra2rq
         oVmg==
X-Gm-Message-State: ALyK8tITkCvRDnFa9rklEtBTUbzbhIsh8Pafm+Cw1n8BuDvsQi7YVdPY5xnXKqEarsauf0vjNGQ+Jxly38U9qduEtcIjyjmsBEHX
MIME-Version: 1.0
X-Received: by 10.112.133.199 with SMTP id pe7mr346088lbb.13.1464172846730;
 Wed, 25 May 2016 03:40:46 -0700 (PDT)
Message-ID: <047d7b34335e6b4e580533a84e2f@google.com>
Date: Wed, 25 May 2016 10:40:46 +0000
Subject: Google Dashboard: Your Account Activity

[DJW]

bigjim

 

The safest way to deal with this is just hit the delete button. If in doubt delete it never ever open it.

 

Dennis

[RV_]

Jim,

 

"To report a message for abuse

1.Go to the message you want to report.
2.Below the subject line, click the small dropdown arrow, then select Report abuse."

 

Source:https://support.google.com/groups/answer/81275?hl=en

[bigjim]

Thanks folks.