3 ms·
>Inspecting the source, the email looked like it actually came from PayPal (SPF, DKIM, and DMARC all passed). Through an email server controlled by Paypal, in
by upofadown 4y ago
>Inspecting the source, the email looked like it actually came from PayPal (SPF, DKIM, and DMARC all passed).
Through an email server controlled by Paypal, in particular. DMARC is not intended to be some sort of replacement for an email signature. It means something different. This is a good example of that.
This was just a regular anonymous unsigned email...