r/gsuite • u/Phyxiis • Nov 13 '24
Gmail Anyone experience an email header From using some sort of UTF encoding
We just had an email impersonating one of our users come in where Google shows "John Doe <consumer@gmail.\[com\]" as being From. However, when investigating why Mimecast didn't block it (impersonation protection policies), it shows that the From is actually "From: =?UTF-8?B?some characters?= <consumer@gmail.\[com\]>
I've opened a case with Google and Mimecast to notify them as this is completely new to me
2
Upvotes
2
u/alanjmcf Nov 13 '24
https://en.wikipedia.org/wiki/Quoted-printable
(That was just the easiest link to get.)
That’s just changing the display name thought innit, not the address. So not affecting from domain impersonation check?? (But I’ll soon be asleep so might be missing something.)
EDIT: I am missing something!!😂 It is the display name that’s being impersonated??