Beware! Frequent Password Phishing Emails!

[amirm]

Thank you so much! Will start a conversation with you....

 

[spigot]

If you forward any suspect emails to me, along with a $100 analysis fee, I'll determine whether someone is trying to scam you.

 

[voodooless]

The "From" line in the last email was: "audiosciencereview.com <info @ gh-hyd.com>"

If I may provide a recommendation: it’s worth looking into the SPF Record,

That would not have helped here, since the originating domain isn’t audiosciencereview.com . Regardless, set-up SPF! Good practice!

 

[amirm]

We already use SPF records: https://mxtoolbox.com/SuperTool.aspx?action=spf:audiosciencereview.com&run=toolpage

 

[asov87]

That would not have helped here, since the originating domain isn’t audiosciencereview.com . Regardless, set-up SPF! Good practice!

Indeed, I noticed that after (I should stop reading the forum at midnight)

 

[007Shorty]

Just an idea, if not already practiced:
Brute-force attacks on this forum can be combated by blocking access for 30 minutes after entering an incorrect password three times.

 

[Atanasi]

Xenforo 2.3 supports passkeys, which have built-in phishing-protection: they just don't work if the domain does not match. Passkeys function as a more modern alternative to numerical 2FA. I recommend updating to 2.3 or newer and adopting passkeys.

 

[birdlogic]

Thank you so much! Will start a conversation with you....

Amir, as GD Fan has pointed out, I think this is signaling a new era of maturity for ASR.

Glad to be on here- been following along on the journey and your reviews have informed many of my purchasing decisions.

 

[8T_BoCO]

I'm using the free service Duck Duck Go offers, masking my real email and forwarding messages to me. Changing one's forum registration email to such a forwarder allows nonsense to be filtered out.

DuckDuckGo Email Protection

Our free email forwarding service removes multiple types of hidden trackers and lets you hide your personal email address online.

duckduckgo.com