Are they modifying the message as a part of the relay to adjust the phone 
number?

Isn’t DKIM supposed to prevent in-flight modification of emails?

It looks like based upon the headers provided - the original message is dkim 
signed. 

Maybe it’s being stripped out when it’s relayed?

Regardless - when we reached out to PayPal we couldn’t manage to get anyone to 
understand what was happening.  Microsoft has been even less helpful.

Thank you,

Michael Denney
MDDHosting LLC
https://www.mddhosting.com/

> On Dec 10, 2024, at 2:18 PM, Faisal Misle via mailop <mailop@mailop.org> 
> wrote:
> No, as far as I understand, that's the name of the forwarder address. 
> Whether a mailbox or a distribution list.
> 
> Best,
> Faisal
> 
>> On Dec 10, 2024, at 7:54 PM, Alessandro Vesely via mailop 
>> <mailop@mailop.org> wrote:
>> 
>> On Tue 10/Dec/2024 17:49:38 +0100 Laura Atkins wrote:
>>> There is a huge amount of replay going on right now with domains that are 
>>> p=reject. Venmo is getting hit - and it’s coming through various 
>>> infrastructures.
>> 
>> 
>> So the To: "noreplies2@highlandspark. store" 
>> <noreplies2@highlandspark.store> line was bogus?
>> 
>> 
>> Best
>> Ale
>> --
>> 
>> 
>> 
>> 
>> _______________________________________________
>> mailop mailing list
>> mailop@mailop.org
>> https://list.mailop.org/listinfo/mailop
> 
> _______________________________________________
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to