News for hackers. Stuff that matters.

A comment on Gmail spam-filters PayPal security messages. Parent comment

Re:Gmail spam-filters PayPal security messages by bduerst on Wednesday February 06, 2019 @06:23PM (#19101222)
Whois says it's owned by Paypal on MarkMonitor, but that can be faked, right? Or does MarkMonitor require email address validation? ([email protected] in this case)
[ Parent | on HN ]
Re:Gmail spam-filters PayPal security messages by cm2187 on Wednesday February 06, 2019 @06:48PM (#19101438)
Correct. But even if the whois wasn't fakeable, do I really need to run a whois before I click on a link in an email?
[ Parent | on HN ]
Re:Gmail spam-filters PayPal security messages by bduerst on Thursday February 07, 2019 @08:58PM (#19110726)
Almost like we need an ssl-like authority for email now. Ugh.
[ Parent | on HN ]
Re:Gmail spam-filters PayPal security messages by jakejarvis on Thursday February 07, 2019 @01:23AM (#19103427)
MarkMonitor specifically is pretty picky about only taking on large-scale corporations (google.com, amazon.com, microsoft.com to name a few) so just the fact that it's registered there is usually a reliable way to confirm legitimacy, but checking whois is still way more research than an average PayPal user should need to do to avoid being phished.
[ Parent | on HN ]