Is it still possible to forge "sent from" emails?
This content discusses the possibility of forging the 'sent from' field in emails, a technique historically used to impersonate email senders. The post questions whether such email spoofing is still feasible today despite modern email authentication mechanisms like DKIM and verified sender indicators.
AI Analysis
Technical Summary
The discussion centers on email spoofing, where attackers forge the 'sent from' address to impersonate legitimate senders. Historically, this was possible due to lack of robust email authentication. Modern standards such as DKIM (DomainKeys Identified Mail) and sender verification marks aim to prevent this. However, the post queries if email spoofing remains possible despite these protections. No technical details or vendor advisories are provided to confirm current exploitability or mitigations.
Potential Impact
Email spoofing can enable phishing, social engineering, and fraud by misleading recipients about the email origin. The impact depends on the effectiveness of deployed email authentication and recipient awareness. No confirmed active exploits or vulnerabilities are indicated in the data.
Mitigation Recommendations
No specific remediation or patch information is provided. General best practice involves implementing and enforcing email authentication standards like SPF, DKIM, and DMARC. The post does not provide vendor guidance or confirm current exploit status, so users should consult their email service providers for current protections.
Is it still possible to forge "sent from" emails?
Description
This content discusses the possibility of forging the 'sent from' field in emails, a technique historically used to impersonate email senders. The post questions whether such email spoofing is still feasible today despite modern email authentication mechanisms like DKIM and verified sender indicators.
Reddit Discussion
I remember it was possible in 2005-2006. Some software solutions would allow sending emails to anyone and forge the sender identity.
For example, I could send an email to anyone and pretend I am sending it from [[email protected]](mailto:[email protected])
The recipient would see [[email protected]](mailto:[email protected]) as the original sender.
I know the blue tick mark and DKIM exist but is this still possible today?
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The discussion centers on email spoofing, where attackers forge the 'sent from' address to impersonate legitimate senders. Historically, this was possible due to lack of robust email authentication. Modern standards such as DKIM (DomainKeys Identified Mail) and sender verification marks aim to prevent this. However, the post queries if email spoofing remains possible despite these protections. No technical details or vendor advisories are provided to confirm current exploitability or mitigations.
Potential Impact
Email spoofing can enable phishing, social engineering, and fraud by misleading recipients about the email origin. The impact depends on the effectiveness of deployed email authentication and recipient awareness. No confirmed active exploits or vulnerabilities are indicated in the data.
Defensive Guidance
No specific remediation or patch information is provided. General best practice involves implementing and enforcing email authentication standards like SPF, DKIM, and DMARC. The post does not provide vendor guidance or confirm current exploit status, so users should consult their email service providers for current protections.
Technical Details
- Source Type
- Subreddit
- cybersecurity
- Reddit Score
- 0
- Discussion Level
- minimal
- Content Source
- reddit_link_post
- Post Type
- link
- Newsworthiness Assessment
- {"score":27,"reasons":["external_link","established_author","very_recent"],"isNewsworthy":true}
- Has External Source
- false
- Trusted Domain
- false
Threat ID: 6a6c34789c2644c7f85bbba3
Added to database: 07/31/2026, 05:36:56 UTC
Last enriched: 09/13/2026, 17:37:24 UTC
Last updated: 09/13/2026, 17:37:24 UTC
Views: 54
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.