Got an email from myself? Cloudflare compromised somehow?

Was deleting spam and noticed a random mail from my domain.
How is this happening? Imgur: The magic of the Internet

That email won’t have been sent from your account, it is trivial to set the outgoing mail address on any email and send through an unrelated compromised mail server. Make sure you have SPF and DKIM records set so that receiving mail servers reject any email that appears to come from you, but not from approved sending servers.

2 Likes

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.