@FreakyFwoof @Bruce @jcsteh If the email is one character off from what it should be then that email from the misspelled email address is absolutely not legitimate. Email addresses must be typed correctly in order to either reach the intended recipient, or in this case, be sent from the proper domain if you're trying to pretend your a government or Google or Amazon or whoever. That part, at least, is part of the RFCs governing email.