Spoofed email?

  • Today I received a spam email from an alias I recently created. From what I understand this is called spoofing. I recently changed our sending service to be MailPoet, and went through the process of authenticating our domain. I’m not sure what I did incorrectly or what I should do to fix it. Can someone point me in the right direction?

    Thanks in advance!

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support Ojoma a11n

    (@geraltrivia)

    Hello there @veggieboy1 ,

    Thank you for reaching out about the spam email you’ve received. Email spoofing can indeed be concerning, but I’m here to assist you and ensure your email security is strong.

    Regarding the spoofing issue after changing your sending service to MailPoet, authentication of your domain is a critical step to prevent unwanted mail like this. It appears that there may have been an issue with the setup.

    To assist you effectively, I’ve taken the liberty of checking the DNS records for the domain goodkidproject.com, but it seems that the authentication records are not set up correctly, or perhaps there are different domain names in use.

    Could you please confirm if goodkidproject.com is the correct domain you authenticated with MailPoet? If it is, we’ll need to revisit the authentication step to ensure that your DNS records are configured properly.

    Once you confirm your domain, we will proceed with the next steps and guide you through the process to secure your domain against spoofing.

    Looking forward to hearing back from you.

    Thread Starter veggieboy1

    (@veggieboy1)

    Hi, Ojama.

    Thanks for your response. The domain I authenticated was thewoodenlake.com. That’s where I’m using MailPoet.

    Nick

    • This reply was modified 7 months, 1 week ago by veggieboy1.
    Plugin Support kellymetal a11n

    (@kellymetal)

    Hi there Nick,

    Thank you for letting us know. I see that you have indeed verified that domain in your MailPoet account. I see you are currently using the default neutral DMARC policy (v=DMARC1; p=none;), which is a good first step. Next, you could try switching it to a more restrictive policy changing the none to either quarantine or reject. You can read more about this here: https://dmarcian.com/policy-modes-quarantine-vs-reject/

    That said, it’s still up to recipient mail servers to determine how they handle messages that fail checks, and to actually follow the DMARC policy’s instructions.

    I hope this helps!

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Spoofed email?’ is closed to new replies.