Showing results for 
Show  only  | Search instead for 
Did you mean: 
Go to solution

Is this a phishing or legit email

Hi, is this a phishing email? It doesn't address me by name, so I'm assuming it is. Normally I'd simple ignore and delete an email like this because it doesn't include my name, but yesterday a friend told me emails sent to a different address on the same domain are bouncing back to him as spam. So it seems odd that this email shows up hours later, although it could just be a coincidence. 


If it helps, the raw source (with the email removed) is below, which appears to say the email came from an aol account... so IDK...


Thanks for any thoughts on this.




Received: (qmail 126506 invoked by uid 30297); 22 Oct 2019 11:03:18 -0000

Received: from unknown (HELO ([])

          (envelope-sender <>)

          by (qmail-1.03) with SMTP

          for <REDACTED>; 22 Oct 2019 11:03:18 -0000

Received: from ([])

by CMGW with ESMTP

id Mrwai0ncW4wVlMrwbiWEfo; Tue, 22 Oct 2019 04:03:18 -0700

X-IP-SPAM: Suspect

From: Godaddy Webmail Security <Security>


Subject: Spam detected from email account REDACTED

Date: 22 Oct 2019 19:03:16 +0800

Message-ID: <>

MIME-Version: 1.0

Content-Type: text/html;


Content-Transfer-Encoding: quoted-printable

X-CMAE-Envelope: MS4wfKzA1SDlsGkKqFMw7zTa34DFzPDFsWkiuJhCBGquCCW7h3gDlQ3PGb4Bpoopgn5oi1J5adI3YE5ALn2vJAgRj7sdh1okoG5XUe1SCfF0U7GdgOe+zc75


X-Nonspam: None

Super User III Super User III
Super User III

Re: Is this a phishing or legit email

Yes, this does look phishy.  You can report it at


What service are you using for email on your domain?

Re: Is this a phishing or legit email

Thanks Nate, yeah I figured it looked a bit phishy too, reported it. I'm still using GoDaddy Workspace for email, been with GD a long time and never got around to upgrading or moving it to something newer, if it ain't broke, etc...

Super User III Super User III
Super User III

Re: Is this a phishing or legit email

I'll urge you to consider one of the modern platforms like Office 365 or G Suite to get the latest features including productivity and security.


Make sure you have an SPF record on the domain which helps prevent email spoofing.


It looks like this should be the appropriate record.
v=spf1 –all