Free Email Address

Attackers use public webmail services (e.g., Gmail, Outlook.com, Yahoo) to send phishing emails from accounts that appear generic, personal, or loosely affiliated with a trusted entity. These addresses often bypass basic sender validation and are used to maintain anonymity while appearing legitimate.