4 ms·
It's also entirely possible that the email isn't being sent by them or anyone affiliated with them. FROM headers on email are miserably easy to spoof. I've ha
by twobyfour 9y ago
It's also entirely possible that the email isn't being sent by them or anyone affiliated with them. FROM headers on email are miserably easy to spoof.
I've had thousands of spam emails sent with senders listed as nonexistent addresses from one of my domains. They were sent from third-party servers (my servers were not compromised and I had no open relays), and I only found out because of all the bouncebacks from naive receiving servers.
The only thing the domain holder can do at that point is to set up DomainKeys and similar measures - which still won't prevent spammers from using the domain, it'll just cause more of the mail to bounce back as spam.
- Swinx43 9y agoThank you very much for that information. I was wondering what one can do if the email address is actually spoofed and not coming from the domain it seems to.
- notspanishflu 9y agoYou need to watch the email headers and look for the originating IP. Then you'll see if the presumed FROM address is what it says. If it's an spoofed email, send an abuse report to the owner of that originating IP [+], including full headers and full body text. [+] If the originating IP is from a country you know it won't give a shit, look for the next jump.
- jlgaddis 9y agoLook at the Received: headers.
- ViViDboarder 9y agoDKIM and SPF should help mitigate. Those are something the domain owner needs to configure.