How to report SPAM, and false positive samples to EsvaLabs – LibraCyber - Help Center

Introduction

At Esvalabs we study and research existing spam campaigns in real time, keeping focused even on emerging threats. One of the most important activities Esvalabs does is to deeply analyze any feedback from live installations: we take it seriously and any missed spam or any false positive you report to us, will be a plus for all customers thanks to our hourly live rules updates. Spam and False Positives samples can be reported to Esvalabs according to any of the following methods:

Directly from LibraCyber ESG Web Administration (preferred method)
With any email client as RFC-2822 attachments
With LibraCyber ESG Outlook Add-in

To understand the difference between the Report as action and the Mark as action, click here: What happens when click on “Mark As” or “Report As”?

Report From LibraCyber ESG Web Administration (Preferred Method)

Connect to your LibraCyber ESG Appliance and login as administrator, next:

Select "Search"
Apply any eventual filter
Run Search Message Operation
Select messages and hit action Report As and choose "Bad" or "Good" accordingly

Preferred method: by sending the message from ESG, we'll receive the original message along with your appliance analysis. This will greatly help us in handling the samples in time.

Report From Mail Client

Microsoft Outlook

It is preferred that you install native LibraCyber ESG Add-in as you will have two comfortable buttons in Outlook toolbar. The Add-in is compatible with Outlook 2010 & onwards versions. Follow Without the plugin installed proceed as follows:

Create a new email message.
Address it to : spam@esvalabs.com or : not-spam@esvalabs.com
From your Inbox, select the spam email that you received (you must select the email, not the content).
Drag and drop the selected item(s) into the new email. This will now be displayed as an empty email with the suspect email as an attachment.
Send the email to Esvalabs at the address you selected above.

Mozilla Thunderbird

From Mozilla Thunderbird proceed as follows:

Select the sample.
From the toolbar choose Message > Forward as > Attachment.
Address it to : spam@esvalabs.com or : not-spam@esvalabs.com
Send the email

Lotus Notes

Esvalabs specialists cannot recommend a default method for attaching RFC-2822 messages, but the following options are available:

Send the message direct to your Technical Support contact: - Create a new email message addressed to your support contact. - Open the spam message, select View > Show > Page Source. - Copy and paste the Page Source content into the new email.
Use the free third party enhancement software, 'Open-NTF'. This adds a menu option, 'Forward MIME to RFC-2822', to the Tools button. Use this to forward the email.

Other Email Client

It is preferred that you send samples as RFC-2822 attachments. Reporting in any other format can cause the loss of key message content, which may prevent Esvalabs from effectively analyzing the samples. If your client has the option Forward as Attachment, use it!

Email spam samples to : spam@esvalabs.com
Email false-positive spam samples to : not-spam@esvalabs.com

What information is delivered to Esvalabs

When you report a sample, our laboratories receive the original email sample in it's raw format, just like it has been received via SMTP and without any modification. A report of the analysis performed by ESG on the email is also attached to the sample. This is a screenshot of the analysis summary our analysts receive:

Email sample delivered to esvalabs

Further Information

Samples sent to Esvalabs will be deeply analyzed and may reflect in general rules update. In any case:

You will NOT receive feedback for emails messages sent to these addresses.
Samples sent to Esvalabs will not necessarily be considered to be, or detected as, spam.
If you need more information or guidance, please contact technical support.