Sophos Email customers using IP-based mailflow rule connectors must migrate to certificate-based configuration by March 31st. To see if you're affected Click Here.

Discussions Report a fake domain

Sophos Email requires membership for participation - click to join

Thread Info

State Suggested Answer
Replies 2 replies
Answers 2 answers
Subscribers 16 subscribers
Views 3304 views
Users 0 members are here

Options

Suggested

Report a fake domain

LuisAyalaMagni 2 months ago

How can I report to Sophos a fake domain that is impersonating my customer domain?

Added TAGs
[edited by: Raphael Alganes at 1:09 AM (GMT -8) on 26 Feb 2024]

Top Replies

josepalad 2 months ago +2 suggested

LuisAyalaMagni If it is impersonating the envelope-from header then SPF checking in Sophos Email (with quarantine or reject action) should be able to stop those emails. Note that your customer domain has…

Parents

0 josepalad 2 months ago

LuisAyalaMagni If it is impersonating the envelope-from header then SPF checking in Sophos Email (with quarantine or reject action) should be able to stop those emails. Note that your customer domain has to have an SPF record though.
If it is impersonating the from header, then Erick's recommendation would be what can be done.
Cancel
Vote Up +2 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel

Reply

0 josepalad 2 months ago

LuisAyalaMagni If it is impersonating the envelope-from header then SPF checking in Sophos Email (with quarantine or reject action) should be able to stop those emails. Note that your customer domain has to have an SPF record though.
If it is impersonating the from header, then Erick's recommendation would be what can be done.
Cancel
Vote Up +2 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel

Children

No Data