nanog mailing list archives

Namecheap's outbound email flow compromised: valid rdns, spf, dkim and dmarc on phishes


From: Eric Kuhnke <eric.kuhnke () gmail com>
Date: Sun, 12 Feb 2023 15:40:47 -0800

https://www.namepros.com/threads/concerning-e-mail-from-namecheap.1294946/page-2#post-8839257

https://lowendtalk.com/discussion/184391/namecheap-hacked

It looks like a third party service they gave their keys to has been
compromised. I got several phishes that fully pass as legit Namecheap
emails.

https://www.namecheap.com/status-updates/archives/74848

Current thread: