NOTE: I got one of these probes as well about 2 weeks and flagged it to
watch. Thanks for posting about it. -KAM
On 6/25/2022 11:54 AM, L. Mark Stone via mailop wrote:
RAPTOR REMARK: Alert! Please be careful! This email is from an EXTERNAL sender.
Be aware of impersonation and credential theft.
I'm a Dmarcian customer. FWIW, emails from their domain I have received are
all routed from Google/Gmail servers and IPs. None of the tests they offer
available to the public and to subscribers involve sending email to my
knowledge.
To be fair, rua/ruf email addresses for my domains point to Dmarcian (I like
their reporting dashboard and feel it is good value for money), so I can't
comment on any email flows related to reporting.
Suggest contacting Dmarcian to confirm that they do/do not use Sendgrid if the
headers look like the email originated with Google, but otherwise I would
suspect it's just more Sendgrid cruft.
Hope that helps,
Mark
_________________________________________________________________
L. Mark Stone, Founder
North America's Leading Zimbra VAR/BSP/Training Partner
For Companies With Mission-Critical Email Needs
----- Original Message -----
From: "Slavko via mailop" <mailop@mailop.org>
To: "mailop" <mailop@mailop.org>
Sent: Saturday, June 25, 2022 11:05:29 AM
Subject: [mailop] dmarcian Probe
Hi all,
today i got email with subject:
dmarcian Probe: 8f472310-d2a3-4ba3-803c-4352e3026997
It was delivered from xvfrtbnw.outbound-mail.sendgrid.net with ZIP
attachment which looks as DMARC reports for my (nonexistent but served
by * in DNS) subdomain 8tVqwhagZ5GJ2PL9 and was delivered to my domain's
RUA email.
I do not use dmarcian at all, thus i am curious what this email means.
Please, is someone trying to register this random generated subdomain
on dmarcian? Or what?
thanks
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
