4 ms·
Ask HN: Did Monday.com's SendGrid service get compromised?
Just got a fake internal email from monday.com as a customer. It passed DKIM, SPF, DMARC, Composite Auth and the Sender IP from Sendgrid looks legit under hostname o9.email.monday.com
I won't mention the body text and the subject, but the email itself looks fine with actual monday.com links but only the call-to-action is a short URL so leading me to conclude that it is fake.
Anyone getting suspicious emails from them?
- moooo99 2y agoI haven’t received any suspicious looking emails from them. Short URLs aren’t necessarily suspicious and are often used to track clicks on a CTA. Is it the mere presence of the short link that is raising suspicions for you or do the actual redirects seem suspicious as well?
- throwmumaway 2y agoHad time to check the short URL now, resolves to a dodgy formstack site instead of monday.com site, so definitely a phishing site.
- mhdmhd 2y ago[dead]
- KomoD 2y ago> I won't mention the body text and the subject Why?
- throwmumaway 2y agoIt could attract too much attention and revealing the text may let the scammer know they've been noticed.