WF Report Said “Suspicious Link Used to Steal Info” Hacke?

Hi @hollywoodonlocation,

I would sway towards this being a false-positive where some terminology, a recently updated filename, or some other information in your summary mentions something malicious.

As it’s not too common to see from Gmail, feel free to forward a copy of that email to us at?wftest @ wordfence .com?– be sure to add your forum username to the subject and let me know here when you’ve sent it so I can take a look.

Thanks,
Margaret

I deleted the email. Gmail would not even let me send it to inbox. But yo can still view th image of the emil from the link above.

Hi @hollywoodonlocation,

Unfortunately, the image doesn’t include all of the information we would need to investigate this. If the email is still in your Trash in Gmail, you can get the email contents by clicking on the email, clicking on the menu with 3 dots near the top right, and then clicking “Show original“. You can copy and paste that into a new email to send us the original email body and headers.

If you’ve fully deleted the email, please let us know the next time you receive one. I did a quick check on your domain name, and the IP attached to your mail subdomain (162.241.219.44) is listed on a blacklist: https://www.spamsources.fabel.dk/lookup?ip=162.241.219.44. It may help to work with your email host to get this delisted.

Thanks,
Margaret