Spoofed Sender Domain

The sender address shows a real organization's domain, the part after the @, but the message didn't come from that organization's mail servers. Forging it makes the address look genuine, down to the last character.

Also known as
Aliases
  • email spoofing
  • exact-domain spoofing
  • domain spoofing
  • direct domain spoofing
Broader terms
  • identity spoofing
Named examples
  • Microsoft 365 Direct Send abuse
Mapped to
MITRE ATT&CK®

Connected in PH!SH