Mastodawn

#support #tech #cybersecurity #email #verification I am wondering how can I verify an email I received is indeed from the domain which it claims to come from? In other words, if an email claims to have been sent by [email protected] how can I verify the email was sent through a server authorized by example.com? I have received the said email through Proton's email service, and I can see the headers

Show thread

Cornelius K.Jul 9, 2025

@cybertrapped
Safest approach is reaching out via a second communication channel (say telephone them using a phone number you found independent of the one in email signature) to verify.

If this is not an option, verifying the SPF record and DKIM signature should provide a reasonable indicator that the email was sent by someone controlling the domain, as well as (assuming they don't have an unauthorized 3rd party using their mailserver).

Hope this was helpful. :)

Show thread

cybertrapped Jul 9, 2025

@kln

You will not believe it unless you are experiencing it, but whether I make calls through smart phone, or VoIP, I seem to always be talking to impersonators. I have not been able to disconnect Internet service despite talking to Cox customer rep (whom now I recognize was an impersonator) who assured the service would be disconnected.

This is why I am trying to figure out how to evaluate the emails.

I shared the phone call at the bottom of this post: https://cybertrapped.substack.com/p/update-getting-help-for-declined

UPDATE: Getting Help For Declined Costco Citi Card Ends With An Impersonator On The Other Side Of The Call

I went to the Milpitas Citibank, and I was allowed to make a call from their office phones. The passphrase was not enough to identify myself; I could give him the last 6 numbers of my checking account

cybertrapped’s Substack

Show thread

Freddie Leeman Jul 9, 2025

@cybertrapped Pay attention to valid DKIM signatures. If a DKIM signature passes validation, the associated domain is—at minimum—partially responsible for the message.