6 ms·
I received an email from @dropboxmail.com about this. I figured it was a phishing attempt... I guess not.
by mariusc23 10y ago
I received an email from @dropboxmail.com about this. I figured it was a phishing attempt... I guess not.
- Spiritus 10y agoWhy aren't they using dropbox.com instead of the suspicious looking dropboxmail.com?
- wodenokoto 10y agoFacebook does/did the same. Must be some reason for it.
- inertial 10y agoOne reason could be to not let spam reports on dropboxmail.com affect the primary domain's reputation (which is also used for corporate communication). If for any reason, the reputation of dropboxmail.com is compromised, they can move on to dropboxmail-1.com etc.
- eriknstr 10y agoI began investigating DNS records to determine if there was some way there to conclusively ascertain that dropboxmail.com was legitimately owned by Dropbox. I could not find a way to determine this through DNS. Next, I went to dropboxmail.com in my web browser, which redirected me to a page on dropbox.com [0] assuring me that dropboxmail.com was owned by dropbox.com. [0]: https://www.dropbox.com/en/help/217 https://www.dropbox.com/en/help/217
- jamesdwilson 10y agoThe redirection is not a valid way to test ownership as an attacker can easily redirect.