Customer Asks:

— Robert

is this from you?  style seems wrong…  and there was no heads up (unless I
missed it)

——– Forwarded Message ——–
Subject: New Message Received
Date: Fri, 12 Feb 2021 12:18:41 +0100
From: Eskimo.com Notification <margaretbaros@gvec.net>

——— End Relevant Part of Forwarded Message ———

I’m sending this to everyone because these phishing scams are a daily occurrence these days and I’m wasting WAY too much time responding to them.

Please read this and note, the portion inside the <>, the portion in RED is the REAL e-mail address.  This portion of the address is verified by SPF, DKIM, and DMARC records and so is difficult to forge (it is not impossible but I’ve seen it done successfully in like maybe two times in the last ten years).  The portion outside the <> in BLUE whatever the sending client puts in the name field of their mail client and is easily set to whatever they want it to be.

If you do not see <nanook@eskimo.com> or <support@eskimo.com> INSIDE the <> marks then the mail is NOT from us.  Please forward these to spamtrap@eskimo.com.

If when you attempt to forward them to spamtrap@eskimo.com, they are rejected, this means that someone who has previously forwarded them has already generated a virus signature so this particular instance is already addressed.