<story><title>How did this PayPal spoof email pass SPF, DKIM and DMARC</title><url>https://security.stackexchange.com/questions/257417/how-did-this-paypal-spoof-email-pass-spf-dkim-and-dmarc</url></story><parent_chain></parent_chain><comment><author>elondaits</author><text>For many weeks now, PayPal has been sending me emails that say they have a U$S 5 reward for me. I have to click a button and the prize is limited to the first 40k people.
I assume it’s probably legit. Now… people should NOT click on this kind of email!! Are they so dense? Their security department should have a heart to heart with their marketing department.</text></comment>
<story><title>How did this PayPal spoof email pass SPF, DKIM and DMARC</title><url>https://security.stackexchange.com/questions/257417/how-did-this-paypal-spoof-email-pass-spf-dkim-and-dmarc</url></story><parent_chain></parent_chain><comment><author>dgreensp</author><text>It’s actually a real email PayPal sends.</text></comment>