After 30 minutes, I think that I get to keep my card. @Ally, you might want to talk to your fraud prevention partner about NOT sending emails asking people to click links to verify transactions -- especially if those messages don't fully authenticate.
Why? Having a malicious domain that authenticates all over the place is trivial, and is not how phishing is determined (Despite what the DMARC sellers may tell you).
-
-
It may not be "how phishing is determined," but failing authentication should be a quick means of determining that something isn't right.
-
Authentication is ok, other data is more timely and better S:N, getting any large corporation properly authenticated is very difficult, and cousin (look-alike domains) autheticate perfectly well. Spamtraps, user complaints, logs (web and mail), passive DNS and SSL Cert logs 1/2
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.