Hi, today received an email claiming the sender was from my own domain, but the account doesn't existed. Mail asked for sensitive transaction info. Below are the mail headers :
Received-SPF: Neutral (zoho.com: 173.201.192.58 is neither permitted nor denied by domain of mike.yacks@mse-forks-inc.com using best guess ) client-ip: 173.201.192.58
Authentication-Results: mx.zohomail.com;
spf=none (zoho.com: 173.201.192.58 is neither permitted nor denied by domain of mse-forks-inc.com) smtp.mailfrom=mike.yacks@mse-forks-inc.com