11

Last week I got this phishing mail claiming to be from Amazon.

Enter image description here

Is this really from Stack Exchange?

Where would I report this?

Update:

It really seems not to be sent by Stack Exchange.

Enter image description here

  • 4
    This is the fault of GMX. StackExchange publishes a list of IP addresses that are allowed to send emails from their domain (SPF record), and 78.47.69.165 ain't on it. – amon May 18 at 10:24
  • 1
    Yup, we publish SPF and DMARC records for our domains. Those headers indicate that the message should have been dropped or marked as spam by your email provider. Is it possible that you've whitelisted everything purporting to be from stackexchange.com? – Dean Ward May 18 at 15:23
  • @DeanWard I just checked and there is nothing at all on my whitelist. I couldnt find any other setting that may caused this. – Felix D. May 19 at 15:33
12

Is this really from Stack Exchange?

No, this is not from Stack Exchange. It's rather easy to fake the sender address, and these spammers chose Stack Exchange because it has a reputable name[citation needed]. I can imagine (depending on your account settings) Stack Exchange sending promotional emails about their own products, but never this kind of thing. Also, they wouldn't send it from from@stackexchange.com, that's a really weird email address. And they certainly wouldn't use 'AmazonDE' as sender name.

Where would I report this?

Generally, you can use the Contact Us form for these kind of things, but it's almost impossible to track down the source of this email. I wouldn't spend my time on it.

| improve this answer | |
  • 5
    Reporting header forgeries is pretty pointless; Stack Exchange can't do anything about it, just like they can't prevent the spammer from putting "Stack Exchange" in the Subject header. They publish an SPF record which should already add a warning on any mail server which implements this anti-forgery technique, though there's a fair amount of false positives for SPF alone. Maybe ask your ISP to enable this if they haven't already. (It might actually be visible further down in the headers already.) – tripleee May 18 at 11:35

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .