• slazer2au@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    7 months ago

    You seem to miss where I said header not from field.

    The emails originate from knowb4 or phishme servers and customers whitelist those servers from anti spam/phishing/url inspection to minimise the false positives.

    The knowb4 and phishme have their names in as part of the email ehlo exchange and are written into the header for tracking.