Hi,
I received an email today which looks like a scam. The send from address was noreply@e.email so not sure how that was possible?
Needless to say I did not click on the button in the email.
Thank you
Regain your privacy! Adopt /e/OS the deGoogled mobile OS and online services
I’ve read that IRS scams are circulating lately.
You should forward that (as an attachment, not in-line) to phishing@irs.gov, assuming that’s still a current contact address for the IRS.
It may also be interesting to view the header/message source information to see what you can learn from it: sender address, origin IP/country, relays, where the links actually point to, etc. If you post any of that here, make sure to scrub your personal info/IP/email address, etc.
Just ignore and delete the message 
What else can you do?… Forward to IRS ‘let us know about a scam email’?…
Hi,
Thank you. I have forwarded the information to phising@irs.gov and moved the email to junk. I just thought it was curious the sender address appeared to be noreply@e.email but perhaps that has always been the case post mail filtering.
This is from the header
Received: from [10.88.0.4] (242.90.81.34.bc.googleusercontent.com [34.81.90.242]) by mail01.ecloud.global (Postfix) with ESMTP id 71B8E34862B1 
Well done. Just do not worry and forget about it. Stay vigilant
And can you tell where the links in the email source data are pointing to? Not to IRS. gov, I’ll bet!
FWIW, email senders can be trivially faked. (When email was designed, no one thought about spam.)
It may be interesting why an e.email address has been used this time, or maybe, as you point out:
Thanks for sharing the info about getting this phising mail with an e.email ID. Will be sharing the details with the infra teams to check.
Something in that header about: googleusercontent.com. Go figure?
Hi @oreillypt wanted to check if the murena account you use is a premium or free account.
Hi Manoj,
I have a premium account.
Thank you
Thanks for the info. Have passed on the details of your issue to the infra team. They will be adding some additional phishing filters to prevent such incidents in future. Should be available in the upcoming release.
