Are they modifying the message as a part of the relay to adjust the phone number?
Isn’t DKIM supposed to prevent in-flight modification of emails? It looks like based upon the headers provided - the original message is dkim signed. Maybe it’s being stripped out when it’s relayed? Regardless - when we reached out to PayPal we couldn’t manage to get anyone to understand what was happening. Microsoft has been even less helpful. Thank you, Michael Denney MDDHosting LLC https://www.mddhosting.com/ > On Dec 10, 2024, at 2:18 PM, Faisal Misle via mailop <mailop@mailop.org> > wrote: > No, as far as I understand, that's the name of the forwarder address. > Whether a mailbox or a distribution list. > > Best, > Faisal > >> On Dec 10, 2024, at 7:54 PM, Alessandro Vesely via mailop >> <mailop@mailop.org> wrote: >> >> On Tue 10/Dec/2024 17:49:38 +0100 Laura Atkins wrote: >>> There is a huge amount of replay going on right now with domains that are >>> p=reject. Venmo is getting hit - and it’s coming through various >>> infrastructures. >> >> >> So the To: "noreplies2@highlandspark. store" >> <noreplies2@highlandspark.store> line was bogus? >> >> >> Best >> Ale >> -- >> >> >> >> >> _______________________________________________ >> mailop mailing list >> mailop@mailop.org >> https://list.mailop.org/listinfo/mailop > > _______________________________________________ > mailop mailing list > mailop@mailop.org > https://list.mailop.org/listinfo/mailop
_______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop